Change log — who changed what, and when
See every change made to your business by you and your staff, filter and search it, and download it as a spreadsheet.
The change log records every change a signed-in person makes (in the website editor, in the owner app or through the API), and every sign-in, sign-out, failed sign-in and download. For each entry you see when, which business, who, what they did, which item, where they were and on what device and, for changes, which fields changed, from what to what.
| Action | When |
|---|---|
| created, changed, deleted | Something was added, edited or removed: business details, hours, pages, photos, services, staff and resources, bookings, leads, contacts, enquiries, users and roles, invoices. Also a reply you or your staff wrote in a chat, and a note or call added to a lead. |
| published, unpublished | A page went live on the website, or was taken off it. |
| signed in, signed out | Someone signed in to, or out of, the website editor or the owner app. Method says how: Keycloak (the normal sign-in page), Password (emergency sign-in) or the editor signing them out after a while without use. |
| sign-in failed | A sign-in did not work, with the reason in plain words (for example wrong password, unknown email, locked for a while after too many wrong passwords, account switched off, wrong code from the authenticator app, sign-in took too long) and the IP address with its city and country. It is checked every minute, so it can take a minute to appear. See Failed sign-ins without an email. |
| downloaded | Someone downloaded the change log as a spreadsheet, with how many rows and which filters. |
Who can see it: owners see the changes of their own businesses only. The platform team sees all businesses. Staff do not see the change log. Nobody can change or delete an entry.
Open the change log
- Open the website editor (on your phone: Business → open the website editor).
- In the side menu, under Platform, click Change log.
The newest changes are at the top. The table shows 50 changes per page; use the arrows at the bottom to go to older pages, and Per page to show 25 or 100. Only one page is loaded at a time, so it stays fast however long the log grows.
Click a row to see all its details, including the list of Changed fields with the old and new value.
Where they were
Every entry made while someone was using the website editor or the owner app also records:
| Column | What it shows |
|---|---|
| IP address | The internet address of their phone or computer. Deleted automatically after 90 days. |
| City, State / region, Country | Worked out from the IP address (IP geolocation by DB-IP). It is approximate: often the nearest big city or the city of the mobile network. |
| Browser, Operating system, Device | For example Chrome 131, Android 14, Phone. |
A sign-in from a city or device you do not recognise is worth checking: ask the person, and if it was not them, change their password and sign them out (see Adding staff and managing access). Failed sign-ins show the IP address and place, but no browser, because the sign-in page does not pass it on. Entries recorded before version 2.5.0 have these columns empty; an older failed sign-in still shows its address as a changed field ip.
Failed sign-ins without an email
Some failed sign-ins have no email address. Their Name is Unknown visitor, and the reason is usually Sign-in page opened without its cookie (old browser tab or a bot). This happens when a sign-in page was left open in a browser tab for a long time and then used, or when a bot (an automatic program) sends the sign-in form. Nobody got in, and you do not need to do anything. Other reasons you may see on such entries are sign-in link already used or out of date (old browser tab) and broken sign-in request (old link or a bot).
Many of them from the same IP address in a short time is a bot trying the sign-in page. If they also show a real email address with wrong password, ask that person to change their password.
Search and filter
- Search (the box above the table): finds a name (for example a page title or a service), a person's email, what was changed (
pages,tenants,services…), a document id, an IP address, a city or a country. - Filters: click Filters → Add filter to narrow by:
- Business (platform team);
- By (a person);
- Action, for example only
deleted; - What, for example only
bookings; - Created At, for a date range ("is greater than" a date);
- Country, City, Browser, Operating system or Device, for example only sign-ins from outside India.
- Columns: click Columns to show or hide Where (website editor or owner app), Document id, IP address, City, Country, Browser and others.
Download as a spreadsheet (CSV)
Click Download CSV above the table. The file contains exactly what the table shows with your current search and filters (all pages, not only the one on screen), newest first, up to 50,000 rows. Open it in Excel, Google Sheets or LibreOffice.
Columns: Time (India), Time (UTC), Business, Business id, User, User id, Action, What, Document id, Name, Where, IP address, City, State / region, Country, Browser, Operating system, Device, Changes (each changed field as field: old → new, separated by |).
What is and is not in the log
- Recorded: changes by signed-in people to business details, hours, announcements, pages (when published or unpublished), photos, services, staff and resources, bookings, leads, contacts, conversations, invoices and user accounts.
- Not recorded here:
- what visitors do, such as sending an enquiry, booking or chatting (each has its own record);
- the AI assistant's chat answers and background work by the platform;
- the automatic "stage changed" line on a lead (the lead's own changed entry shows it);
- page drafts that are only saved, not published (see Versions on the page).
- Never shown: passwords, tokens and secret keys. The log only says that they changed.
- How long: entries are kept for 2 years; IP addresses for 90 days (the city, country and browser stay). When a business is deleted, its entries stay for the platform team.
- Which business: a sign-in or download belongs to the business whose address it happened on, or to the person's only business. Failed sign-ins with an email that is not one of your people are seen by the platform team only.