View Time and Attendance Audit Logs

The T&A Audit Log feature records all activities related to time and attendance management, such as work, schedules, and reports. Each record shows when, who made the change, what changed, and how, to support audits and troubleshooting.

Info

The T&A Audit Log menu requires an active Time and Attendance (T&A) license and operations administrator permission. The T&A Operator account created by default during Time and Attendance plugin installation lacks this permission. Add and assign a custom permission.

Add Time and Attendance audit permission

1. Click Settings on the Launcher page.

2. Click Account → Account on the left sidebar.

3. Click Add Custom Level.

   

4. Enter a permission name and description to view Time and Attendance audit logs.

   

5. In Admin Menu Settings, set permissions for T&A Audit Log and Audit Settings under the Audit Trail menu.

   

6. In Add User, click + Add and select a user group or users.

7. Click Apply at the bottom of the screen to save the custom permission.

View Time and Attendance audit logs

1. Click Settings on the Launcher page.

2. Click Audit Trail → T&A Audit Log on the left sidebar.

3. The Time and Attendance audit log list appears on the screen.

Info

• To change audit log policies such as the retention period, see Set Time & Attendance Audit.

• After upgrading to version 1.0.3, the system encrypts new audit logs regardless of the Encrypt Personal Data on Database option under Settings → System → Security.

• If the system does not record certain audit logs after the upgrade from BioStar 2 to BioStar X, see Upgrade.

Table layout

The audit log list table has 10 columns and shows records in descending order by Datetime.

Column	Description
Datetime	The date and time the event occurred.
User	The user who performed the event. Displayed in the id(name) format.
Account Level	The administrator level of the user who performed the event. Leave this field blank for actions the system executes automatically.
Action	The type of action executed. This field shows Create, Update, Delete, Read, Export, or Operation.
Category	Domain category of the event target. (Shift, Schedule, Report, T&A Audit Log, Setting, System)
Target	The target the action applies to. Displayed in the type: id(name) format.
Sub Action	Detailed action name that appears only for Operation, Read, and Export actions.
Modified Fields	The name of the field that changed or was viewed. Always leave Operation blank.
Details	Detailed information for each action. (Changed values, query conditions, field snapshots, and more)
IP	IP address from which the user accessed. The system shows automatically issued records as 127.0.0.1.

Info

• Records where Action is Update always refer to only 1 target. Time and Attendance does not include bulk editing that changes multiple targets at once, so targets never appear as a group.

• Names shown in User, Target, and Change Details keep the value from when the record occurred. If the name changes later or the target is deleted, the name shown in past records stays the same.

• If the Target or Modified Fields value has 2 or more entries, only the first item is shown, and the rest are collapsed into a remaining-count badge on the right (e.g., +208). If the remaining count is 1,000 or more, the badge shows +999. Check the exact total count in the detail popup title. Click the badge to open the detail popup for that cell.

  

• Long cell values truncate to one line with an ellipsis. Hover over the value to see the full text in a tooltip. The tooltip truncates overflow text as ....

  

View details

Cells with values in Target, Modified Fields, or Details appear underlined and are clickable. Click a cell to open a details pop-up for that row’s action. Close it with OK or .

Enter a keyword in the Search field at the top of the popup to highlight or filter matching entries. When searching, the target popup updates groups and counts per group. The title total count stays the same.

Find records with filters

Combine the filters in the Filter section to narrow down and find the records you need. Select multiple values in one filter to combine them with OR. Apply multiple filters together to combine them with AND.

Filter	How it works
Datetime	Set the start and end dates and times. No length limit applies to the search period.
User	Enter a search term and press Enter to find matching users. The list is empty when you first open it.
Account Level	Enter a search term and press Enter to find matching administrator levels.
Category	Select one or more categories from the searchable checkbox list.
Target	Enter a search term and press Enter to find matching targets.
Action	Select one or more actions from the checkbox list.
Sub Action	Select a detailed action from the searchable list.
IP	Enter a search term, then press Enter to find matching IP addresses.

• If you apply no filters, records from the last 30 days appear by default.

• Select a value in each filter popup, then click Add Condition to apply it to the search immediately. Click Cancel to cancel the selection and close the popup.

  

• Applied filters appear as the first filter and the number of additional filters. Click to clear only that filter. Filters with no selected value appear as None.

  

Info

Enter a search term to see results for the User, Account Level, Target, and IP filters. The search supports partial matches; enter part of a name or ID. The search includes deleted targets and marks them as Deleted.

Set the query period

Click Datetime to open the Date Range popup.

1. Set the date and time for Start datetime and End datetime. Click Today to jump to today.

2. Click OK to apply the query period.

Save filter

Save frequently used search conditions in Saved Filters, then load them when needed.

1. Set filters to match the required conditions.

2. Click Save Filter in the Filter section.

3. The system adds New Filter to the filter list on the left.

• Click , enter a new name, then press Enter to rename the filter.

• Click to delete the filter.

Info

You can save up to 20 filters. The browser stores saved filters, so they do not appear on other PCs or browsers.

Additional records from cascading deletion

Editing or deleting a work schedule may also delete temporary schedules and absences for users who use it. The system logs each deleted temporary schedule and absence separately from the work schedule change or deletion.

• If cascading deletion deletes nothing, the system creates no additional records.

• Target includes 1 work schedule that caused the deletion and only the users whose entries were actually deleted. It does not include all users in the schedule.

• Details shows the number of deletions. When you delete a work schedule, it also shows the affected period.

Set columns

Change column positions or hide columns in the audit log table. On the right side of the Filter section, click → Column Setting.

• In [ Column List ], clear the checkbox for the column to hide.

• Drag a column to change the column order.

• Click Default Column to initialize column settings.

Click Apply to save the settings.

Export to CSV

Export audit logs to a CSV file for use with external analysis tools.

1. In the Filter section, set filters if needed.

2. Click → CSV Export on the right side of the section.

3. When the CSV Export window appears, enter Export Reason (optional), and click Apply.

   

The exported CSV file includes all 10 columns, one line per record. It adds quotation marks only to cells that contain commas. Use a vertical bar (|) to separate multiple values in cells such as Target and Modified Fields (example: Schedule: 7(Team Schedule)| User: 12(Robert)). In records where Action is Update, Details includes all fields without ellipses.

Caution

The CSV file includes values as-is, including values a spreadsheet program may interpret as formulas. Do not open the downloaded CSV file directly in a spreadsheet program. If needed, open it with the text import feature.

Tip

If you set filters, the export includes only the filtered results in the CSV file.