Use Platform → Logs to review recorded activity that your permissions allow you to see.
Find an event
Choose the relevant activity view and time range.
Search logs and apply the available filters to narrow the records, actions, organizations or users.
Use Activity over time to see when matching events occurred. Empty time buckets mean no matching recorded events; bars do not need to fill the width.
Open an event for its available details and record context.
Trace a user
Open Trace, select a user and review their recorded activity over the chosen period. Search and filter the timeline, then open an event to inspect it. No results means no matching retained events in that scope and period, not proof the user never accessed anything.
Export matching activity
Use Export and choose CSV or JSON. Wait for collection to finish; you can cancel an export in progress. These are audit-event exports, separate from organization-data exports under Platform → Exports. Handle exported event details according to your organization's data policy.
Understand the limits
Logs show recorded activity, not current sharing configuration. Use a record's Access tab for configured access. This guide does not include password-rotation review or claim that a password has changed in its external system.