Administrators can search the Okta System Log to find group membership additions and removals. Querying specific event types in the System Log and exporting the results to a Comma-Separated Values (CSV) file provides a detailed report of these membership changes.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• System Log
• Group Membership
• Comma-Separated Values (CSV)

How are group membership additions and removals searched in the Okta System Log?

Query the specific group membership event types in the Okta System Log and download the results as a Comma-Separated Values (CSV) file.

1. Navigate to the Okta Admin Console and go to Reports > System Log.
2. Specify a time range using the From, To, and Time Zone fields.
3. Enter group.user_membership.add or group.user_membership.remove into the search field to search for group addition or removal events.
   
   
4. Press the Enter key or select the Search icon.
5. Select Download CSV to export the data.

Related References

• Event Types
• System Log filters and search
• System Log API