# Review security information

## Security and audit information

The project audit trail is the record of activity for one selected project. Use it when
you need to review who did what and when, inspect event details, or export the project
audit information.

| If you need to… | Go to… |
|---|---|
| Open the project audit trail | [Open Security & Audit](#open-security--audit) |
| Understand the filter, columns, and controls | [Understand the audit screen](#understand-the-audit-screen) |
| Filter, inspect, page through, or export events | [Review and export audit events](#review-and-export-audit-events) |
| Handle an empty or loading result | [Handle empty, loading, and paging states](#handle-empty-loading-and-paging-states) |
| Review related audit administration | [Security & Audit overview](doc:security-and-audit-overview) or [Audit reference](doc:audit-reference) |
| Review organization-wide audit information | [Organization audit](doc:organization-audit) |

The Security & Audit surface sits alongside Analytics, Audit Trail, Export Center, and
Access Control in the product's enterprise administration areas.

## Before you start

The audit trail is scoped to one project at a time. Select the project whose activity you
want to review before the event list can load.

**Prerequisites**

- You are signed in and can open the **Security & Audit** page.
- A current project is selected in the header.

If no project is selected, the page displays **Select a project**. It also displays
`The audit trail is scoped to one project at a time.` and
`Choose a project from the header dropdown to view its audit log.`

## Open Security & Audit

**Steps**

1. Open the **Security & Audit** entry in the administrative navigation.
2. Confirm that the **Security & Audit** page is open.

![The Security & Audit page with the project audit list, action filter, event columns, and paging controls visible.](https://atloriaassets.blob.core.windows.net/assets/a438221c-c1af-407c-b9e6-a56c986db846/7c1f1061d351b8a9c06ccf2ad0dafb60.png)

**Result:** The **Security & Audit** page is open for the selected project.

## Understand the audit screen

The audit screen combines one action filter with an event list. Each row gives the event
time, user, action, and details; selecting a row opens its metadata.

The screen contains these parts:

| Screen part | What you use it for |
|---|---|
| **Action filter** | Limit the list to one action or return to all actions |
| **When** | Read when the event occurred |
| **User** | Identify the user shown for the event |
| **Action** | Read the recorded action |
| **Details** | Read the event details |
| Event row | Open the event's metadata |
| **Previous** and **Next** | Move through result pages |
| **Export CSV** | Request a CSV copy of the project audit trail |

The **Action filter** offers these choices:

| Choice | Use it to… |
|---|---|
| **All Actions** | Show the list without an action filter |
| `version.published` | Filter for published-version events |
| `document.updated` | Filter for updated-document events |
| `document.edited` | Filter for edited-document events |
| `webhook.received` | Filter for received-webhook events |
| `version.reviewed` | Filter for reviewed-version events |
| `export.downloaded` | Filter for downloaded-export events |
| `schedule.triggered` | Filter for triggered-schedule events |

The page heading is **Security & Audit**. Its summary reads
`Who did what, when — the full audit trail for the selected project`.
While data loads, the page displays `Loading audit events…`. When no events match, it
displays **No audit events found** and
`Events appear here as soon as anything is published, edited, or exported.`

## Review and export audit events

Use this procedure when a project is selected and the audit list is available.

**Prerequisites**

- A project is selected in the header.
- The audit page is open.

**Steps**

1. Select **All Actions** or another choice in **Action filter**.
2. Read the matching event rows under **When**, **User**, **Action**, and **Details**.
3. Select an event row to open its metadata.
4. Choose one available action from the table.

   | Choose | When to use it | Result |
   |---|---|---|
   | **Previous** | When it is visible and you need earlier results | The list moves back 20 events |
   | **Next** | When it is visible and you need later results | The list moves forward 20 events |
   | **Export CSV** | When you need a CSV copy of the project audit trail | The page requests the project audit CSV |

The filter resets the result offset to zero when you change the selected action. The page
requests the selected action together with a limit of 20 and the current offset.

**Result:** The filtered audit list remains on the Security & Audit page, and selecting
**Export CSV** starts the project audit CSV request.

## Handle empty, loading, and paging states

The page changes its visible content according to the selected project, loading state, and
number of returned events.

| What you see | What it means | What to do |
|---|---|---|
| **Select a project** | No current project is selected | Choose a project from the header dropdown |
| `Loading audit events…` | The project audit request is loading | Wait for the list or empty state |
| **No audit events found** | The current result contains no events | Review the action choice or select another project |
| **When**, **User**, **Action**, and **Details** | The current project has events to review | Read the rows or use the action filter |
| **Previous** | Earlier results are available | Move back one page |
| **Next** | Later results are available | Move forward one page |

This page provides an action filter. Its declared filters do not include actor, project,
start-date, or end-date choices.

**Result:** The page shows the state that matches the current project and result set, with
the applicable review and paging controls visible.

## When review does not complete

Use the visible message to choose the next action.

| What you see | What it means | What to do |
|---|---|---|
| **Select a project** | The page has no current project to query | Choose a project from the header dropdown |
| `Loading audit events…` | The audit request is still loading | Wait for the result state |
| **No audit events found** | No events are available in the current result | Change **Action filter** or select another project |
| **Export CSV** | The page requests a CSV copy of the project audit trail | Select **Export CSV** when you need a copy |

If an audit request fails, the page stays on the audit screen with an empty event list and
no separate error message. The event row remains the way to open its metadata.

## Continue from the audit review

After reviewing the project audit trail, use **Export CSV** when you need a copy of the
project audit information. For the broader administrative context, continue to [Security
& Audit overview](doc:security-and-audit-overview). For related audit information, open
[Audit reference](doc:audit-reference). For organization-wide audit information, open
[Organization audit](doc:organization-audit).

**Result:** You have either completed the project audit review on this page or moved to the
related administrative information for the next part of the review.