How to Read the Activity and Command Log

Activity is the record of what happened to your devices: states that changed, commands, access and shares, automations, alarms and settings. It answers "who did that, and when?". Each device's own page also has an Activity section and a Commands section.

Before you start

You need the View IoT Devices right to open the Activity tab. What you see depends on your other rights:

With View IoT Activity, you see the activity of the whole organization.
Without it, you see only activity for devices you can see, and the page says Only devices you can see.
Rows about access need Manage IoT Access, and rows about shares need Manage IoT Sharing, unless you have View IoT Activity.

Read activity

Open Devices (IoT) in the side menu, then the Activity tab.
Narrow the list with Device, Place, Connection, Kinds, From and To. Clear filters removes them all.
Read the columns: When, What happened, Device, Place, What, Who and Detail.
Choose Load more to go further back. The newest rows come first.

Who names who or what acted: a member by name, SI member and a name, Automation and a name (or An automation), Shared access and the share's label, a voice link by its name (or Voice control), Vendor (a change the vendor reported) or System.

Read a device's commands

Open the device from the Devices tab.
Go to the Commands section. Each row shows when it was asked, the control, who asked and the status.
The status is Pending, Sent, Done, Failed or Unconfirmed. An Unconfirmed row is marked with a warning icon, and can show Try again. See What an Uncertain Command Means.
Choose Load more for older commands.

Result

You can see what happened, to which device, and who or what did it.

If it doesn't work

"No activity in this period.": widen the dates or choose Clear filters.
"Only devices you can see" and rows you expected are missing: you do not have View IoT Activity. Ask an administrator.
There is no Activity tab: your role lacks View IoT Devices, or IoT Devices is not turned on.

What is kept, and for how long

Activity is kept for the number of days set under Settings → Devices (IoT) → Data And Exports (30 to 365; 90 unless someone changes it).
Commands, alarms and share uses are kept for 400 days.
No one in your organization can edit or delete the command record. It is removed only once it is older than 400 days.

Good to know

Numeric readings, such as a temperature or a power level, and locations are not written as activity. A numeric reading appears only as Threshold crossed, when it crosses a limit that an automation or alarm watches. Current values are kept only as the latest reading.
Repeats of the same motion-type event on one device within 60 seconds are recorded once.