Audit log

Logged activities

Sitecore Common Audit Log records user activities as they occur in supported Sitecore digital experience platform (DXP) applications. Every audit log includes:

What activity occurred.
When the activity occurred and in which Sitecore DXP app.
Which user performed the activity.
Which entity was affected by the activity.

Entities

The entity can be a feature or data in a Sitecore DXP app.

For example, when a Sitecore Cloud Portal administrator adds or removes roles from a user's account, the entity is the affected user. In contrast, when a user creates or deletes an experience in Sitecore Personalize, the entity is the experience.

Here are the activities that Sitecore Common Audit Log records for Sitecore DXP apps:

Example audit log

Here's an example audit log. In the log object:

The system key contains the name of the Sitecore DXP app where the activity occurred.
The action key contains the activity that occurred.
The sourceSystemUserContext object contains which user performed the activity.
The entity object contains the entity affected by the activity.

{
  "system": "Personalize",
  "time": "2026-01-08 `08:17`:32",
  "action": "experience_deleted",
  "entity": {
    "id": "574eedc0-79d9-4375-93ad-873737d4c8e1",
    "type": "EXPERIENCE",
    "extensions": {
      "entityLevelExtension": "AnyCustomValues"
    }
  },
  "sourceSystemUserContext": {
    "id": "[email protected]",
    "anonymousId": "dxGef14c",
    "IPAddress": "198.10.12.01",
    "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36"
  },
  "extensions": {
    "eventLevelExtension": "AnyCustomValues"
  }
}

In this example, user [email protected] deleted an experience in Sitecore Personalize on January 8, 2026.

If you have suggestions for improving this article, let us know!