Review the audit log

The audit log is the record of sensitive changes in your company. Each entry shows who made a change, what changed, and when. Use it to check a payroll change, a leave decision, or a change to someone's access.

No one can edit or delete an entry, whatever their role. Kelola only adds new entries, and it keeps every entry.

Before you start

• You need the Owner or Admin role. Only owners and admins see the Settings menu. If a manager or an employee opens the page, Kelola shows Admins only.
• There is nothing to turn on. Kelola records these changes automatically.

Open the audit log

Open Settings → Audit log. Kelola shows every change, newest first, 50 at a time.

Each row is one change. A row has six columns:

• When: the date and time of the change, in your language and your device's time zone.
• Actor: the person who made the change. Kelola saves their name at the time of the change. If they change their name later, old entries keep the old name.
• Action: what the person did, as a short label in your language, such as Approved or Updated. If Kelola has no label for an action, it shows the action's code.
• Record: the record the change is about, such as an employee's name, "Pay run October 2026", or a leave request with its dates. When a page in Kelola shows that record, the name is a link to it.
• Entity: the kind of record that changed, in your language, such as Pay run. It uses the same names as the Event type filter.
• Change: the values the entry recorded, each with its old value and its new value (old → new). A dash (—) means there was no value.

A long change fits on one line, so part of it is hidden. To read it in full, select the arrow at the end of the Change cell. Kelola lists each field with its old value and its new value. Select the arrow again to hide the list.

An edit to a pay component or to the payroll settings lists every field, including the ones that stayed the same. An entry that removes something, such as a deleted one-off adjustment, shows only a dash in the cell. Select the arrow to see its old values.

See more entries

Under the list, Kelola shows how many entries are on the page. When more entries match your filters, select Load more to add the next 50 to the list. You can repeat this until you reach the oldest entry. Kelola never removes old entries.

Recognise changes made by the Kelola team

When the Kelola team makes a change while they work inside your company, for example to help you with setup, the Actor column shows their name followed by "(platform super-admin)". They have no employee record in your company, so this label is how you know who it was.

To see when they worked in your company, look for the Platform access entries from the same time. The Kelola team started working here entry shows when they began, and the Kelola team stopped working here entry shows when they finished.

Entries from before 28 September 2026 show a dash (—) in the Actor column for these changes instead.

See what Kelola records

Kelola adds an entry for each change in this table. Here, "admin" also means the owner.

A User data entry for an edit lists only the fields that changed. These can be the first name, last name, department, position, employment type, role, status, line manager, office location, and work schedule. Suspending someone is an edit too, so it shows as a status change.

Filter the list

Use the three filters above the list. You can use any of them together.

1. Under Event type, choose the kind of record you want, such as Pay run. To see every kind again, choose All events.
2. Under Person, choose the person who made the changes. The list includes people who have left. To see everyone's changes again, choose Everyone.
3. Under Date range, select the box that shows All time. Pick a start date, then an end date. Kelola includes both dates. To clear the range, select the × at the end of the box. The list then shows all time again.

The list updates as soon as you change a filter. If nothing matches, Kelola shows No audit entries.

Changes by the Kelola team have no employee record in your company, so the Person filter cannot find them. Use Event type and Date range to find those entries.

Export the audit log

To save the entries as a file, select Export CSV or Export Excel at the top of the page. The file holds the entries that match your filters, newest first.

• The file has the same columns as the list: when, actor, action, event type, record, and changes. The column names and the values are in your own Language.
• Times are in your company's time zone, as YYYY-MM-DD HH:MM.
• One file holds at most the newest 5,000 entries. When more entries match, Kelola tells you after the download. To export older entries, pick an earlier date range and export again.

Read the values in an entry

Kelola shows each value the way you see it on other pages:

• A department, position, manager, office location, work schedule, leave type, or pay component shows its current name. So do the employee on a one-off adjustment and Decided by on a leave decision.
• If that record was deleted, or Kelola cannot find it, the value shows Deleted or unknown record.
• Amounts show in your company's currency and number format, for example Rp500.000.
• A pay component's rate shows as a percentage for Percent of base, for example 5%. For overtime, it shows as a multiplier, for example ×1.5.
• Minutes show as hours and minutes, for example 8 h 5 min.
• A status, a role, or an on/off setting shows in your language, for example Active → Suspended, or Yes → No.
• The clock-out time on an Attendance override and the date someone left show in your device's time zone.
• On a Payroll settings entry, the switches for BPJS Kesehatan (health), BPJS Ketenagakerjaan (employment), and PPh 21 (income tax) always show a dash as the old value. Kelola records only their new value. The first time someone saves the payroll settings, every old value is a dash.

A few field names differ from the names on other pages:

• Manager is the Line manager field, the fallback manager.
• Location is the person's office location.

Understand what stays private

Kelola never writes an employee's pay amounts, bank details, or tax IDs into the audit log.

• When an admin selects Save payroll, the entry says only that the pay details changed. It stores no base compensation, bank account, NPWP (tax ID), NIK (national ID), or tax and BPJS (Indonesian social insurance) settings.
• When an admin saves Recurring pay components, the entry shows how many components the person now has, and which ones. It does not show the amounts.
• When an admin adds or removes a one-off adjustment, the entry shows the month and the component code, not the amount. When an admin edits one, the entry shows the old and new amount.

The default amount of a pay component does show when someone edits it. That amount is a company-wide setting, not one person's pay.

Know what Kelola does not record

The audit log covers only the changes in the table above. For example, Kelola does not record:

• new leave requests, new shift fixes, and rejected shift fixes
• new swap requests, a colleague accepting or declining a swap, and cancelled swaps
• asking a payslip question (only marking it resolved is recorded)
• sign-ins and clock-ins. Sign-ins belong in a separate security log, which Kelola does not have yet.
• changes people make to their own profile (their own document uploads are recorded)
• files downloaded from the audit log

Next steps

• Edit an employee's record
• Manage roles and access
• Set up payroll
• Run payroll
• Approve requests