# What the Control Hub administrator activity log records

Canonical: https://warmtransfer.net/knowledge/wxcc-control-hub-audit-log

Last verified: 2026-09-05

Cisco states that the administrator activity log tracks site configuration changes and recording management actions, and never enumerates what a recording management action is[^11]. The activity log displays these site configuration changes and recording management activities only for a site that is Control Hub managed or linked[^2].

## Logged events and recording actions

The only recording action any source states is logged is manual deletion, which captures the actor, the time, the reason, and any notes[^9]. No source states that playing or downloading a recording is logged, and none states that any action is not logged[^8].

## Administrator roles and access

Cisco names organisation full administrators and read-only administrators as able to audit activities in the activity log, and names no permission[^10]. The Contact Center activity log article names no role, stating only that a Webex Contact Center administrator can audit activities, while the article that does name roles never mentions Contact Center in its body[^1]. Sources disagree on non-full administrator access: the Contact Center article announces that a new custom role will allow non-full administrators to access audit logs, using the future tense and without naming the role[^3].

## Retention, searching, and export limits

Webex migrated Contact Center audit logs from the Management Portal to Control Hub, backfilling 1 year of historical data, with older Management Portal data reachable until 31 March 2026 and unavailable from 1 April 2026[^7].

Audit clusters outside India retain administrator activities for 1 year, while the audit cluster in India retains administrator activities for 3 years[^5]. Although the India audit cluster retains administrator activities for 3 years, the search interface only offers a date range of up to 1 year, with no documented route to reach the remaining 2 years of retained data[^6].

Each activity log report exports at most 20,000 audit events, and an organisation with more must narrow the date range or the filters[^4].

## See also

See also [Finding playing and deleting a Webex Contact Center recording](https://warmtransfer.net/knowledge/wxcc-recording-management).

## Applicability

Applies to: Cisco Webex Contact Center and Cisco Webex. Sources checked 2026-09-05.

## What remains uncertain

The specific custom role that gives non-full administrators audit log access is not covered by the sources below. The Control Hub audit-log permission that reads a deletion audit entry is not covered by the sources below. The Control Hub audit events reference that enumerates the categories is not covered by the sources below.

## Sources

[^1]: The Contact Center activity log article names no role, saying only that a Webex Contact Center administrator can audit activities, and the article that does name roles never mentions Contact Center in its body. Source: [Review activity logs in Control Hub for Webex Contact Center](https://help.webex.com/en-us/article/hi3lqs/Review-activity-logs-in-Control-Hub-for-Webex-Contact-Center), Contact Center article opening; the general article's body searched for Contact Center. Checked 2026-09-05.
[^2]: The activity log displays site configuration changes and recording management activities only for a site that is Control Hub managed or linked. Source: [Review activity logs in Control Hub for Webex Contact Center](https://help.webex.com/en-us/article/hi3lqs/Review-activity-logs-in-Control-Hub-for-Webex-Contact-Center), Audit administrator activity section. Checked 2026-09-05.
[^3]: The Contact Center article announces that a new custom role will allow non-full administrators to access audit logs, in the future tense and without naming it (disputed). Source: [Review activity logs in Control Hub for Webex Contact Center](https://help.webex.com/en-us/article/hi3lqs/Review-activity-logs-in-Control-Hub-for-Webex-Contact-Center), Audit log migration section, custom role access. Checked 2026-09-05.
[^4]: Each activity log report exports at most 20,000 audit events, and an organisation with more must narrow the date range or the filters. Source: [Review activity logs in Control Hub for Webex Contact Center](https://help.webex.com/en-us/article/hi3lqs/Review-activity-logs-in-Control-Hub-for-Webex-Contact-Center), Audit administrator activity section. Checked 2026-09-05.
[^5]: The audit cluster in India retains administrator activities for 3 years and other audit clusters retain them for 1 year. Source: [Review activity logs in Control Hub for Webex Contact Center](https://help.webex.com/en-us/article/hi3lqs/Review-activity-logs-in-Control-Hub-for-Webex-Contact-Center), Audit administrator activity section. Checked 2026-09-05.
[^6]: Although the India audit cluster retains administrator activities for 3 years, the search interface only offers a date range of up to 1 year, with no documented route to reach the remaining 2 years of retained data. Source: [Review activity logs in Control Hub for Webex Contact Center](https://help.webex.com/en-us/article/hi3lqs/Review-activity-logs-in-Control-Hub-for-Webex-Contact-Center), Audit administrator activity section. Checked 2026-09-05.
[^7]: Webex migrated Contact Center audit logs from the Management Portal to Control Hub, backfilling 1 year of historical data, with older Management Portal data reachable until 31 March 2026 and unavailable from 1 April 2026. Source: [Review activity logs in Control Hub for Webex Contact Center](https://help.webex.com/en-us/article/hi3lqs/Review-activity-logs-in-Control-Hub-for-Webex-Contact-Center), Audit log migration for Webex Contact Center. Checked 2026-09-05.
[^8]: No source states that playing or downloading a recording is logged, and none states that any action is not logged. Source: [Review activity logs in Control Hub for Webex Contact Center](https://help.webex.com/en-us/article/hi3lqs/Review-activity-logs-in-Control-Hub-for-Webex-Contact-Center), Both activity log articles read in full. Checked 2026-09-05.
[^9]: The only recording action any source states is logged is manual deletion, with the actor, the time, the reason and any notes. Source: [Manage Interaction History](https://help.webex.com/en-us/article/97823o/Manage-Interaction-History), Interaction History key capabilities; the 2 activity log articles read in full for anything wider. Checked 2026-09-05.
[^10]: Cisco names organisation full administrators and read-only administrators as able to audit activities in the activity log, and names no permission. Source: [Review your administrator activity log in Control Hub](https://help.webex.com/en-us/article/2tc9yx/Review-Your-Administrator-Activity-Logs-in-Cisco-Webex-Control-Hub), Opening paragraph. Checked 2026-09-05.
[^11]: Cisco states that the administrator activity log tracks site configuration changes and recording management actions, and never enumerates what a recording management action is. Source: [Review activity logs in Control Hub for Webex Contact Center](https://help.webex.com/en-us/article/hi3lqs/Review-activity-logs-in-Control-Hub-for-Webex-Contact-Center), Opening paragraph and the shared note. Checked 2026-09-05.