The audit trail logs every change made across your organisation, so you can see who did it, when it happened, and what each value looked like before and after. You reach it from Setup under Audit trail.
The audit screen
The screen opens on the All tab, with the full history in front of you. Six tabs run across the top: All shows everything, while Configuration, Data, Access, Security and Runs each narrow the trail to one family of activity — setup changes, changes to your data, changes to who can see and do what, sign-ins and security events, and automated runs.
Above the list sits a row of search and filter controls. Below it, each activity appears as its own line that summarises what changed, the person or process behind it, and when. Related lines gather under a day heading — Today at the top, then earlier days as you scroll back.
Activities and events
Every line in the trail is one activity — a single event such as a sign-in, an edit to a form, or a change to someone's access. Each one appears in plain language: a status shows its label rather than a stored code, a linked item shows its name, and timestamps show in your local time, so the trail reads the way your forms and screens do.
Select any activity to open its detail. For a change, the detail lays out the field that moved alongside its value before and after, so you can see exactly what shifted.
The actor behind each activity travels with it. An activity can come from a member of your organisation, a service account, or an automated process, and the trail names the actor in each case.
Filtering and export
The tabs give you the first cut; the controls above the list narrow it further.
- Search activity searches the trail by free text.
- Model narrows to one kind of item.
- Action narrows to one kind of change.
- Actor type narrows by who or what made the change.
- Invocation narrows by how the change was triggered.
- Outcome narrows by whether it succeeded.
- User narrows to a single person.
- Date range narrows to a window of time.
Refresh pulls in the latest activity without leaving the screen, and Export downloads the trail so you can keep a copy or share it outside Pyron.
For a view narrowed to the access side of the story — sign-ins, security settings, and requests that were turned away — see the policy activity view.