Audit trail

The Evidence Audit Trail in Axon Evidence provides a chronological record of all interactions with a piece of evidence.

Watch this video to learn how to view the Axon Evidence audit trail.

Audit trail events

The audit trail PDF will detail various events associated with the evidence. Each event name is paired with an activity description to provide clear insight into the action that took place.

Audit events are immutable and represent actions as they were recorded at the time they occurred. For the Add evidence to case event, if a case title or evidence title is changed after an audit event is created, the audit trail displays the current case or evidence title when viewed later.

To support verification and traceability when titles change, audit events include unique identifiers (UUIDs) for cases and evidence.

Audit trail events include:

  • Viewed evidence
  • Updated evidence
  • Shared or unshared evidence
  • Evidence added to case folder
  • Annotation edited, updated, or removed
  • Title updated File bookmark updated, downloaded, edited, or removed
  • Retention level updated
  • File streamed, downloaded, updated, or removed
  • Category removed or updated
  • External ID edited, updated, or removed Individual clip request
  • Evidence flag updated or removed Evidence created, restored, or deleted
  • Restored from backup
  • GPS tag removed or updated
  • Quarantine category added
  • Case removed
  • Custom metadata updated
  • Video clip edited or removed
  • Share copy request
  • Case updated Evidence cloned
  • Deleted category detected on upload
  • Delete request received
  • Description added
  • External sharing link viewed
  • File clip downloaded Local file deleted
  • Marked for deletion
  • Migrated Shared transfer
  • Reassigned
  • Tag removed or updated
  • Video bookmark removed or updated
  • Video clip added or updated
  • Removed from case folder
  • Security level or status updated
  • Description updated Assisted redaction request
  • Capture date time or end date time updated
  • Redact request Image edited
  • Package request Photo edit request
  • Permalink copied
  • Download link shared
  • Transcript file created or downloaded
  • Transcript order created
  • Record buffered

Audit event details

Audit trail entries include titles and UUIDs to support accurate verification, even when titles or evidence titles change.

For the Add evidence to case event, each audit entry displays the title recorded at the time of the action and the current title with clear labeling to distinguish them.

Case audit trail

When evidence is added to a case, the case audit trail displays:

  • The current evidence title
  • The evidence UUID
  • The original evidence title recorded at the time of the action

Example:

Evidence 'vandalism_scene.jpeg' with unique ID ‘0563439CF2344785ABAFFCA45FE09AE7’ added to case.

Evidence audit trail

When evidence is added to a case, the evidence audit trail displays:

  • The current case title
  • The case UUID
  • The original case title recorded at the time of the action

Example:

Evidence record added to case ‘G-25062025' (unique ID: 728FC713-81C2-4BF4-835D-C808B463E3EA, original Case Title: G-19062025).

Export a case audit log

The audit log of a case shows what updates were made to a case and when, including when tags were added or removed. You can export a PDF with information about a specific date range.

  1. On the Case Details page, select Export Audit Log.
  2. The Export Audit Trail pane appears.
  3. Select the Audit Period from the list. The Audit Period defaults to 2 weeks.
  4. Select the Include checkbox if you want to include confidential activity.
  5. Select RUN AUDIT. The status will show "in progress", and will change to Download when the report is ready.
  6. Download the PDF from the browser and review.

Exported audit trail reports display the same audit event information shown in the user interface, including titles and UUIDs.

Device audit trail information

All Axon and TASER device audit trails show events and changes for the selected device. The audit information can be filtered to a particular date range or show the entire life of the device.

The audit information is available in both PDF and comma-separated values (CSV) format, with each event, action, or change shown on a different line in the audit trail.

  • The PDF file has four columns: Item, Date/Time, Event, and Additional Information.
    • The Item column is a numerical listing of the events, actions, or changes for this file, and the item number changes depending on the selected date range for the audit trail.
    • The Event column has a short description of the event, action, or change.
    • The Additional Information column has general camera status information such as remaining battery percentage, video count, MB remaining, and firmware version.
  • The CSV file has seven columns: Date Time, Action, Battery Percentage, Video Count, Firmware Version, MB Remaining, and Unique ID.
    • The Action column has a short description of the event, action, or change and corresponds to the PDF Event column.
    • The Battery Percentage, Video Count, Firmware Version, and MB Remaining columns have camera status information and correspond to the information shown in the PDF Additional Information column.
    • The Evidence UID column is a unique string generated for all pieces of evidence on Evidence.com.

Events and changes in the audit trail

The following events and changes appear in the audit trail for all devices:

  • Device registration
  • Device status changes
  • Device assignment information
  • Device metadata changes

Additional events for Axon Body 2 and Flex 2 cameras

Note: For Axon Body 2 and Flex 2 cameras with v1.7 or earlier firmware release, only the camera registration, status change, and assignment information are available. The other events listed are available with the v1.8 or later firmware release for Axon Body 2 and Flex 2 cameras.

  • Camera registered
  • Camera status change
  • Power on or off
  • Event button press or hold
  • Recording start or end
  • Audio recording disabled or enabled
  • Camera docked or undocked
  • Video accessed or streamed using Axon View or Evidence Sync
  • Category updated using Axon View or Evidence Sync
  • ID updated using Axon View or Evidence Sync
  • Title updated using Axon View or Evidence Sync
  • Function button press or hold
  • Battery status button press or hold
  • Volume mute, low, medium, or high
  • Stealth mode enabled or disabled
  • Indicator lights enabled or disabled
  • Marker added
  • GPS coordinates added
  • Date/Time Sync
  • Camera assignment
  • Firmware updated

Export a device audit trail

  1. Select Inventory.
  2. Search for the device you want to view.
  3. In the device search results, select the device Serial No to open the device summary page.
  4. Select Audit Trail.
  5. Select an Audit Period.
  6. Select Run Audit. The Status changes to Running. When the audit trail report is ready, the Status will change to Download.
  7. Select Download. Axon Evidence opens or downloads a PDF for the evidence audit trail. The exact behavior depends on the browser you use and its download settings for PDF files.