AI Assistant
Help Center AI Assistant is now available
Got questions about Lark? Use our AI chat to find the answers.
00:00
Click and hold to drag
Got It
Try Now
Admin | Audit member activity

Admin | Audit member activity

2 min read
Available with these plans:
Starter
Basic
Pro
Enterprise
To upgrade your Lark Plan or for more information, contact Support or your Customer Success Manager. The Lark Basic plan supports only specific countries and regions.
I. Intro
🔖
Who can perform these steps: Primary administrators and administrators with Activity Auditing permissions.
Activity Auditing allows you to view logs of member activity on Lark, including information such as the time, location, and object. By checking a member's activity log, you can detect noncompliance to protect your organization's data and information security.
Note: Before using this feature, make sure that your organization has issued privacy notices to members to ensure compliance with data protection regulations.
II. Steps
Search member activity log
  1. Go to the Lark Admin Console, and click Compliance > Audit Log > Activity auditing.
  1. Fill in the search conditions and click Search. The more conditions you enter, the more accurate the search results will be. The search conditions include:
  • Activity: You can select from multiple activity types, such as Docs, Messenger, Approval, Contacts, Audio/Video Meetings, Account Activity, Workplace, Devices, and Moments.
  • Object type (only available when Docs is included for Activity): You can select from the following object types: Synced block, Base, MindNotes, File, Docs, Sheets, and Folder. This option is not available for other types of activity other than Docs.
  • Object ID: Some events support queries by the operation object ID. For example, when "Docs" is the object type, you can enter the file ID as the query condition.
  • Operator: You can select all or part of the members within the organization, any external Lark user, or anyone on the internet (both inside and outside the organization) as the operator. If you select Selected members, you can further select operators by department and user group, or search for a member. The total number of selected departments, members, and user groups cannot exceed 50.
  • Note: External users can only be selected for Docs and Audio/Video Meetings activities.
  • Time: Select the time range that you want to query. Member activity logs are stored for 180 days, so you can only select from the past 180 days. A single query can only query activity logs within 60 days.
  • IP address: Enter the operator's IP address.
  • 250px|700px|reset
  1. Enter the SMS verification code to verify your identity as an administrator. Then the activity logs will be searched according to the set conditions automatically.
  1. Click View Details next to an activity for more information, such as IP address, device information, file ID, and whether the action is completed.
250px|700px|reset
250px|700px|reset
Export member activity logs
You can export the search results to your local drive as a CSV or XLSX file.
  1. Click Export Data above the search result.
  1. Name the files, select the file formats, and click Export Data.
  1. Choose a location to save the file.
250px|700px|reset
Note: You can export up to 10,000 data entries at a time.
III. FAQs
Will exporting fail if there are more than 10,000 entries?
No. However, if there are more than 10,000 entries, the exported file will only contain the first 10,000 entries. You can use Open API to export more entries. For more information, see Get behavior audit log.
Why is the "File owner" field blank for some activity logs?
The File owner field will appear blank if the file is already permanently deleted.
What's the earliest date I can query from?
Member activity logs are stored for 180 days, so you can only search for activity from the past 180 days.
How long does it take for an activity to appear in the activity log?
Activity is usually logged within 5 to 10 minutes. In the event of server outages or other issues, there may be a delay in logging activity.
Written by: Lark Help Center
Updated on 2024-11-18
How satisfied are you with this content?
Thank you for your feedback!
Need more help? Please contact Support.
0
rangeDom
rangeDom
rangeDom
rangeDom
rangeDom