Loading
Salesforce now sends email only from verified domains. Read More
Marketing Cloud Engagement
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Audit Trail

            You are here:

            1. Salesforce Help
            2. Docs
            3. Marketing Cloud Engagement

            Audit Trail

            Audit Trail allows security admin users to view access and activity records from Marketing Cloud Engagement. Receive Audit Trail records either through Automation Studio data extracts or through REST API extracts. Retrieve Audit Trail information periodically for use in your own internal system tools.

            Audit Trail applies to all Marketing Cloud Engagement customers.

            Enable Audit Trail for any user with the Security Administrator role or the Audit Logging > Administer Audit Logging and API Access permission. To enable Audit Trail, in Setup, select Security | Security Settings, and check Enable Audit Logging Data Collection.

            Note
            Note Audit Trail data is available only after enabling. Data logged before enabling isn’t available.

            We recommend retrieving Audit Trail data periodically based on a rolling time frame. For example, you can use an Automation Studio extract to retrieve data. Set a range to pull a rolling day's worth of events with the automation set to run daily. The current day's automation includes the last 24 hours of events, and the next day's automation run includes the current day's events. Import the data into your system for consolidation and analysis. Audit Trail doesn’t provide real-time information.

            Note
            Note Audit Trail stores data in the Central Standard Time zone, and audit data pulled using REST API has a Central Standard Time (CST) timestamp.
            Important
            Important We don’t log ObjectName for these use cases:
            • When a custom role is assigned to a user
            • When a role is assigned to a business unit
            • When a role is assigned to a user of a business unit
            • When security settings are updated
            • When user permissions are updated

            Basic Audit Trail

            Basic Audit Trail is available in Engagement via Automation Studio data extracts and API, and has a 30-day retention period.

            Note
            Note The parent business unit retrieves all audit and security events for itself and its children for basic and advanced Audit Trail. This behavior applies to any part of the hierarchy.
            Basic Audit Trail
            App Audit Event Details
            Setup User authentication Logins and logouts are audited at the enterprise level, not at the business unit level.
            IP addresses  
            Changes to users  
            Changes to user permissions  
            Changes to Roles  
            Changes to Security Settings for all users
            • Logins
            • Password Changes
            • Logouts
            Installed Package Installed Package Create, modify, delete, and license an installed package.
            Component Create and modify for all components. Delete for all components except for API Integration and Marketing Cloud App.
            Scope Permission changes for an API Integration component.
            Client Secret Secret rotation via Generate, Activate for an API Integration component.

            Advanced Audit Trail

            For Advanced Audit Trail, contact your account executive. Advanced Audit Trail is available via Automation Studio data extracts and API, and has a 60-day retention period.

            Advanced Audit Trail
            App Audit Event Details
            Setup All Basic Audit Trail events See Basic Audit Trail table
            User agents  
            Session IDs  
            Changes to business units  
            Email Studio Edits to email content Logs user and time

            Data extension imports and exports

            Data extension imports and exports logging captures all respective events, whether they’re initiated via Automation Studio or API, including manual imports, import activities and data extract automations in Automation Studio, and API calls. See Audit Trail Data Extension Events.

            		  
            CloudPages CloudPages content and collections: created, edited, published, unpublished, deleted Logs user and time
            MobilePush Edits to MobilePush messages  
            MobileConnect Edits to SMS content Log user and time for successful edits of SMS content. Failed SMS edits aren’t logged. Before and after values aren’t logged.
            Google Analytics Integrations Entries when a user updates their Google Analytics configuration
            • Reporting Account - Logs instances of the Google Analytics account being linked and unlinked in Engagement
            • Authorized Views - Logs updates to the Google Analytics Account, Property, and Views configuration
            • Tracking Parameters - Logs updates to the Google Analytics UTM parameter configuration
            • External Audience Account - Logs instances of Engagement accounts being linked and unlinked in Google Analytics
            Automation Studio

            User and action for these Automation Studio events:

            • Automation: start, stop, pause, schedule, delete, copy, skip (system generated; no user)
            • Schedule: delete, pause, update, update time
            • Activity: save, update
            • File Trigger: publish, delete
            • Notification: update, delete
            • Create, Update, Delete: file transfer, data copy or import, query, script, extracts, reports, wait, data verification
            • Journey Entry: Audience, fire event
            • Send GroupConnect
            		 

            See Also

             
            Loading
            Salesforce Help | Article