The Gazette
Tutorial5 steps1 min
How to read your office activity audit log
Step-by-step on getting value out of the activity log — narrow, look for rhythm, drill in, export when needed.
T
TaxWallet Newsroom
June 6, 2026
The activity log records every action your operators take inside TaxWallet. Used right, it's an incident-response tool, a training tool, and a compliance artifact in one. Used wrong, it's a wall of noise. Here's how to read it.
Open Users Management → Activity Reports
(or hit
/activity directly). Default view: last 7 days, every operator, every action type.Narrow by user first
Activity dropdowns make sense when you're asking a question about a specific person. "Why did Maria's conversion drop last week?" → filter to Maria, scope to her shift hours.
Look for the rhythm
Healthy patterns look rhythmic — view, edit, call, SMS, view, edit. Unhealthy patterns burst: dozens of view rows in a row with no edits, or repeated failed login attempts.
Drill into a single event
Click any row to see the full context: device, IP, payload size, downstream effect (which record changed, who was paged).
Export when you need it
Top-right export button → CSV. Useful when an EFIN audit asks "show me everything user X did between 2/15 and 2/22."
Two specific signals worth paging on: (1) a login from a country you don't operate in, (2) a bulk export by anyone other than an admin. Both are surfacing in the alert config we're shipping next month.
#tutorial#activity#audit#compliance#workflow