How to Use the Audit Log in QuickBooks Online

The QuickBooks Online Audit Log is a feature most users have never opened, which is a shame because it's genuinely useful. Despite the name, it has nothing to do with IRS audits. It's just a record of every change ever made to your QBO file: who made the change, when, and what was changed.

Here's what it does, how to find it, and the situations where it'll save you.

What the Audit Log actually is

Every time anyone makes a change in your QBO file, QBO logs it. Adding a transaction, editing a transaction, deleting a transaction, changing a customer name, modifying an invoice, reconciling an account, even logging in: all of it gets recorded with a timestamp and a user name.

This happens automatically. You don't have to turn it on, set it up, or maintain it. It's running in the background of every QBO file, and it can't be disabled.

The point of the Audit Log is to give you a complete history of activity in your file, so you can answer questions like "who changed this transaction" or "when did this account get modified" or "what did this invoice look like before it was edited." Without the Audit Log, those questions would be unanswerable. With it, they take about thirty seconds.

How to find your Audit Log

In QuickBooks Online, click the gear icon in the upper right and choose Audit Log from the Tools menu.

You'll see a chronological list of every change made to your file, most recent first. Each row shows the date and time, the user who made the change, the type of event (Added, Edited, Deleted, etc.), the name and amount of the affected transaction, and a "View" link that opens a more detailed history.

There's a filter at the top that lets you narrow the log by user, date range, and event type. For larger files with lots of activity, the filter is the main way you'll find what you're looking for.

Reading a single audit log entry

When you click "View" on any entry, QBO shows you the change in detail: what the transaction looked like before the change, what it looked like after, and who made the change. Edits are color-coded so the differences are easy to spot.

For deleted transactions, the log preserves the full original transaction even though the transaction itself is gone from your books. That's the key thing to know: deletions in QBO aren't really deletions. They're hidden from your books, but the Audit Log still has the full record.

The real situations where the Audit Log earns its keep

Most users go their whole life without opening the Audit Log in QBO, but the situations where it matters tend to be high-stakes when they come up. Here are the ones I run into most:

Something looks wrong and you don't know why. A balance changed unexpectedly. An account that was reconciled now isn't. A transaction you swore you entered isn't there. The Audit Log tells you exactly what happened to each of those, and when. Often the answer is "you accidentally deleted it on the 12th" or "you edited the date by one digit on the 18th." A two-minute search saves you a half-hour of detective work.

You suspect something fishy. If multiple people have access to your QBO file (a bookkeeper, an accountant, an employee), and something doesn't look right, the Audit Log shows you who did what. I've covered this kind of scenario in my post on protecting your business from fraud, but the Audit Log is the specific tool you'd reach for first.

A transaction was deleted and you don't remember why. Especially common when someone else helps with your books for a while and then you take over again. The Audit Log preserves deleted transactions and lets you see them, which is sometimes the only way to reconstruct what was supposed to be there.

You're handing the file off to someone new. If you're switching bookkeepers or bringing one on for the first time, your new bookkeeper might look through the Audit Log to understand the history of the file before they make changes. Knowing what's there is useful when you're explaining anything unusual.

Tax preparer questions about a specific transaction. If your tax preparer asks why a particular expense was categorized a certain way, or why an income line changed, the Audit Log can usually answer the question. Saves a lot of "I don't remember, sorry" emails.

A few things the Audit Log doesn't do

It doesn't undo changes. The log shows you what changed, but you have to manually make corrections if you want to revert something.

It doesn't notify you when changes happen.

It doesn't replace good access controls. The Audit Log is a record after the fact, not a barrier. If you want to limit who can change what in your QBO file, that's a permissions question, handled in user access settings.

A small ongoing habit worth building

Once a quarter or so, scan your Audit Log for anything that surprises you. Most months it'll be boring (you, your bookkeeper, normal activity), and that's fine. The point of the scan is to catch the unusual thing in the rare quarter where there is one. Five minutes, just a quick look.

If you're not sure what's normal for your file, or if the Audit Log shows things you can't explain, book a free call and we can take a look together.