Product details
Advanced audit log
Review current advanced audit log behavior, availability, limits, and operating details for Slash Social.
Advanced audit log adds export and delivery options on top of the in-Slack audit viewer. Use it when compliance, security, or operations teams need audit history outside Slack in spreadsheet, structured file, or SIEM-friendly formats.
What it includes
Advanced audit export is not available in the current public plan catalog. The in-Slack audit viewer on Team covers browsing and filtering only.
Supported export formats:
| Format | Use |
|---|---|
| CSV | Spreadsheet review and ad hoc filtering |
| JSON | Structured downloads for internal tooling |
| SIEM | Security and operations tools that receive JSONL-style audit streams |
Exports respect brand-scoped filters when you limit rows to a selected brand. Export permissions follow organization admin and billing-owner rules. Each export action writes its own audit record with the format, row count, filters, actor, and request reference.
Large exports may arrive as a follow-up direct message or file link rather than inline in the modal.
How to use it
- Open
/social, switch to Settings, and open View audit log. - Confirm the selected brand and any filters supplied by the viewer entry point.
- Choose Export CSV, Export JSON, or Export SIEM JSONL when your role and plan allow export.
Run a small export with a narrow date range first. Confirm the file or follow-up message arrives and row counts match what you see in the in-Slack viewer for the same filters.
Details
In internal or explicitly enabled environments, Slash Social checks capability access, your role, and whether the Slack action is still current before it starts an export. A visible internal action is not evidence of public commercial availability.
Audit retention follows Slash Social’s platform retention policy. Advanced audit log does not provide customer-configurable retention periods or external SIEM connector management.
If export is blocked, treat the capability as unavailable unless your operator has explicitly enabled it, then confirm admin or billing-owner access. For viewer-only questions, see Audit history.