How to See the OU Changes in the System Log
Nov 27, 2025
Administration
Okta Classic Engine
Okta Identity Engine
Overview
This article describes how to see the Active Directory (AD) Organizational Units (OU) changes in the System Log.
Applies To
- Active Directory
- System Log
Solution
There might be cases where is needed to check and see what and when something was changed in the AD settings in Okta (for example, OU changes).
Track OU/AD changes using the System Log and the below query based on the targeted AD:
debugContext.debugData.requestUri eq "/admin/app/active_directory/instance/<instanceID>"
The Active Directory instance ID can be found in the URL of the AD settings in Okta, as shown in the screenshot below:
The result in System Log would be as shown in the screenshot below:
NOTE: This will not show changes on the Active Directory server. The query is for Okta and will show changes on the AD settings on the Okta side.
