---
title: "DNS audit log"
description: "Who changed the MX record, and when. Every action in DNSense is written to an append-only audit log that nobody can edit, exportable as CSV or JSON."
canonical_url: "https://dnsense.io/audit-log"
---

> Index of every page on this site: [llms.txt](https://dnsense.io/llms.txt)

<key-visual-subpage ctaHref="https://app.dnsense.io/" ctaIcon="ArrowUpRight" ctaLabel="Start for free" description="Who changed the MX record, who invited the freelancer, who replaced the Cloudflare key. The audit log answers, and nobody can edit it, not even the owner." highlight="nobody can rewrite" imageAlt="Audit log of a team with DNS, template and role changes" imageUrl="feature-audit-hero.webp" title="A trail nobody can rewrite">



</key-visual-subpage>

<feature-rows :rows="[{"title":"Append only by design","titleIcon":"List","description":"An entry can be written and read, and that is all. Editing and deleting are blocked in the application itself, not by a setting somebody could switch off.","imageUrl":"feature-audit-entry.webp","imageAlt":"Details of an audit log entry with time, user, IP address and user agent","bullets":["Every entry holds the time, the person, the IP address and the browser used","Names stay on entries, even after that account is removed","The trail stays intact when people leave the team"]},{"title":"More than DNS records","titleIcon":"ShieldCheck","description":"Records are what you look at most, but the questions that matter later are often about access. Who was invited, who changed a role, when a connection got new credentials.","imageUrl":"feature-audit-trail.webp","imageAlt":"Audit log with record changes, approvals, templates and role changes","bullets":["Record changes, reverts, approvals and zone imports","Members, invites, roles and team security settings","Connections, templates, schedules, Spaces and domain lock changes"]},{"title":"Built to be searched and exported","titleIcon":"Search","description":"A log you cannot query is a log nobody reads. Narrow it down by person, action or date range, and export what you found when an auditor or a client asks.","imageUrl":"feature-audit-export.webp","imageAlt":"Audit log filtered by person, with CSV and JSON export","bullets":["Search by name, zone or record","Filter by action, person and date range","Export to CSV or JSON in one click"]}]" highlight="Every action recorded" label="Audit log" title="Every action recorded, in one place">



</feature-rows>

<faq :faqs="[{"question":"Can an administrator delete entries?","answer":"No. The application refuses updates and deletes on audit entries outright, so there is no role or permission that can rewrite the log."},{"question":"What happens to entries of a deleted account?","answer":"They stay, with the name of the person who acted. Removing somebody from your team never removes what they did from the record."},{"question":"Is the audit log the same as the zone history?","answer":"No. The zone history holds DNS record changes with the record before and after, ready to revert. The audit log holds every action across the platform and is never reverted."},{"question":"Which plans include the audit log?","answer":"All of them. Nothing in DNSense is locked behind a plan, so the audit log is there from your first domain on the free tier."}]" decorativeShape="bottom-left" label="Questions" title="Frequently asked questions about the audit log">



</faq>

## Sitemap

See the full [sitemap](https://dnsense.io/sitemap.md) for all pages.