Content Logs

System administrators can access detailed Content Logs, which are available for direct download from the Admin Console or for real-time streaming through Adobe I/O Events. These reports provide information on how end users are working with corporate assets.

As end users interact with assets — actions such as create, update, or move — the details are recorded in log files. Actions performed on PDF Spaces are also logged. You can export these log files to track actions that users perform on the Creative Cloud and Document Cloud assets owned by your organization. As you move more assets into Adobe's cloud storage solutions, your coverage becomes more robust and meaningful.

You can track assets your Enterprise ID and Federated ID users manage. You can also track how Adobe ID users use these assets.

However, you can only track and control assets for the Adobe ID users migrated to Enterprise storage and authenticated by your organization. For personal Adobe IDs, individuals hold legal control of their assets. Learn how to migrate users from Adobe IDs to Enterprise ID, or Federated ID.

You can retrieve Content Logs for the following user actions:

Download Content Logs from the Admin Console

To view the Content Logs for your organization, do the following:

The report is downloaded as csv files. For a description of the fields in the downloaded file, see Log Schema.

Stream content logs via Adobe I/O Events for real-time monitoring

In addition to downloading logs manually, enterprise customers can also stream content activity logs using Adobe I/O Events. This option is ideal for enterprises that require automated compliance tracking, security analytics, or integration into existing operational workflows.

It allows real-time ingestion into security and monitoring platforms such as: 

• Splunk 
• Microsoft Sentinel 
• Sumo Logic 
• Other SIEM or data analytics tools 

Setting up

1. Follow the Adobe I/O Events setup guide.
2. Subscribe to Content Log Events.

Know your content log report

Release notes

The following issues may affect you if your organization has been updated to storage for business. You are on the new storage model if you see a Storage tab in the Admin Console.  

• Logs can contain internal system events, such as events from system users identified as “<service name>@adobe.com” email addresses.
  
• Logs of internal system events may include paths that do not exist in the customer's directories. 
• Some log entries may not include prefixes [creative_cloud] or [document_cloud] in the path column.