Access logs are an easy way to check for any unusual or suspicious sign-in activity. On the Standard, Plus and Enterprise Grid subscriptions, owners and admins can use access logs to view sign-in details for all members of a workspace.
What can you see using access logs?
The time and date of each new sign-in
The IP address of each device that has accessed each account
A list of devices that have accessed each account
View access logs for all members
From your desktop, click on your workspace name in the top left.
Select Settings & administration, then Workspace settings from the menu.
Click Access logs on the right.
If you notice any irregularities, ask the affected member(s) to sign out of all sessions from their personal access logs.
Note: Members can check their personal access logs if they’re worried that their account has been compromised.
Understand access log entries
When members are connected to and actively using Slack, workspace access logs are updated every hour. New entries are generated when members do any of the following:
Sign in to their account
Open the Slack app on their computer or mobile device
Sign in with a unique IP address and a desktop or mobile device