The QuickBooks Online activity log is a built-in audit trail that records who did what and when inside your company file, from logins and invoice edits to deleted transactions and setting changes. You can open it by going to the gear icon and selecting Audit Log under the Tools section. This article explains how the log works, what it captures, how to filter and export it, common problems, and how it compares to similar tools.
What the Activity Log Records
The audit log in QuickBooks Online tracks a wide range of user actions across all areas of the account. Each entry shows the date and time, the user who performed the action, the type of event, and the affected transaction or setting. Typical recorded events include:
- User logins and logouts
- Creating, editing, viewing, or deleting invoices, bills, checks, and journal entries
- Changing account names, tax rates, or company settings
- Adding or removing users and changing their access levels
- Voiding transactions or changing their status
- Exporting reports or lists
- Changing the fiscal year or accounting method
The log does not record every keystroke or every time a report is merely opened. It focuses on substantive changes and security-relevant events. For example, simply viewing a customer list may not appear, but changing a customer’s credit limit will.
How to Access and Use the Audit Log
To open the activity log, click the gear icon (top right), then under Tools choose Audit Log. The page displays a table of events, most recent first. You can:
- Filter by date range using the calendar picker
- Filter by user from the dropdown list
- Search for a specific transaction or event type
- Click any entry to see more details, including the exact changes made
Each entry shows the event name, the user, the date/time, and the affected record. Clicking an entry expands it to show the old and new values for changed fields. For example, if someone changed the amount of an invoice from $100 to $150, you will see both values.
You can also export the log to a CSV file for offline review or to share with your accountant. The export includes the same fields as the on-screen view.
Why the Activity Log Matters
The audit log is primarily a security and troubleshooting tool. It helps you answer questions like:
- Who logged into the account last night?
- Why did a transaction disappear?
- Who changed the tax rate before the quarter-end report?
- Did an employee access payroll data they shouldn’t have?
For small businesses, it is also useful for reconciling discrepancies. If your bank feed shows a payment that doesn’t match your records, the log can show whether someone edited the original transaction or created a new one. For accountants, the log provides a clear trail when reviewing a client’s bookkeeping for errors or unauthorized changes.
A common misconception is that the activity log is only available on higher-priced plans. In fact, the audit log is included in all QuickBooks Online subscriptions, including the Simple Start plan. However, the length of history retained may vary by plan; check your subscription details or contact support if you need to look back more than a year.
Filtering and Searching Tips
When you have many entries, filtering is essential. Use the date range to narrow down a specific period, such as a month-end close. Use the user filter to see only one person’s actions, which is helpful if you suspect an error by a particular employee. You can also search by event type, such as “invoice” or “delete,” to quickly find relevant entries.
For example, to find who deleted a bill, set the date range to the week in question, select the user if known, and type “delete” in the search box. The log will show all deletion events, and you can click each to see the deleted transaction’s details.
If you need to review changes to a specific account, such as the bank account balance, you can search for the account name in the log. However, the audit log does not show balance changes directly; it shows the transactions that affected the balance.
Common Problems and Limitations
Users often report a few issues with the activity log:
- Log not showing all events: The audit log may not capture some background system changes, such as automatic bank feed updates or certain sync activities from third-party apps.
- Export is large: If you have many transactions, the CSV export can be huge and slow to open. Try filtering by date range before exporting.
- No undo from the log: The audit log is read-only. You cannot reverse a change directly from the log; you must manually correct the transaction.
- Data retention: QuickBooks Online may only keep audit log entries for a certain period, often 12 months, depending on your plan. For older entries, you may need to use a third-party tool or your own backups.
Another limitation is that the audit log does not show who printed a report or who viewed a specific customer’s details. It focuses on changes, not views. If you need to track every view, you would need a separate monitoring tool.
Comparison with QuickBooks Desktop Audit Trail
QuickBooks Desktop has a similar feature called the Audit Trail, but it works differently. In Desktop, the audit trail is a report you can run from the Reports menu, and it shows changes to transactions with before-and-after values. In QuickBooks Online, the audit log is a screen with filters and export, not a standard report. The Online version also records user logins, which the Desktop audit trail does not.
Another difference is that Desktop’s audit trail can be turned off by the administrator, while the Online audit log is always on and cannot be disabled. This makes the Online version more reliable for security purposes.
Template for Tracking User Actions
If you need to keep a manual record of user actions outside of QuickBooks, you can use the following template. This is useful for documenting changes when you need to share with a non-QuickBooks user or for internal review.
| Date/Time | User | Action | Transaction/Record | Details of Change | Reason/Notes |
|---|---|---|---|---|---|
Sample (fictional): 2024-05-14 10:32 | Jane Doe | Edit | Invoice #1042 | Amount changed from $500 to $550 | Client requested additional hours
Frequently Asked Questions
How far back does the QuickBooks Online activity log go?
The retention period depends on your subscription plan. Many plans keep audit log data for 12 months, but some higher-tier plans may retain it longer. To be sure, check your plan details or contact QuickBooks support. If you need older records, consider exporting the log periodically and storing the CSV files yourself.
Can I delete or edit entries in the audit log?
No. The audit log is tamper-proof by design. You cannot delete, modify, or hide any entry. This ensures a reliable audit trail. If you notice an error in the log, you can only add a correction transaction, not change the log itself.
Does the activity log show who viewed a transaction?
No, the audit log records changes and logins, not every view. If you need to track who opened a specific invoice or customer record, you would need a third-party app that offers more detailed user activity monitoring.
Can I export the activity log to Excel?
Yes. In the Audit Log screen, click the Export button to download a CSV file that you can open in Excel or Google Sheets. The export includes all filtered entries, so filter first to keep the file manageable.
Why is an event missing from the activity log?
Some system-generated changes, such as automatic bank feed imports or background syncs from connected apps, may not appear in the audit log. Also, if you are looking for a change made before your subscription started or beyond the retention period, it won’t be there. For critical events, consider using a third-party logging tool that integrates with QuickBooks Online.
Final Thoughts
The QuickBooks Online activity log is a powerful tool for keeping your books accurate and secure. By understanding what it records and how to use it, you can quickly resolve discrepancies, monitor user activity, and maintain a clear audit trail. If you need to track changes beyond what the log provides, consider additional monitoring apps or regular exports. For complex security or compliance needs, consult a qualified IT or accounting professional.