Lag times
The lag times in this table reflect how long it takes before collected data tied to specific Admin console reports and audit logs is available to view.
| Item name | Report name | Lag time |
|---|---|---|
| Highlights | ||
| Gmail | Gmail report | 1–3 days |
| Drive | Drive report | 2–6 days |
| Hangouts | Hangouts report | 1–3 days |
| Google+ | Google+ report | 1–3 days |
| Calendar | Calendar report | 1–3 days |
| Document Link Shared Status | Drive report | 2–6 days |
| Security | ||
| External Link Shared Files | Drive report | 2–6 days |
| External Link Shared Files | Security report | 1–3 days |
| Less Secure Apps Access | Security report | 1–3 days |
| 2-Step Verification Enrollment | 2SV report | 1–3 days |
| Aggregate reports | ||
| Accounts | Accounts report | 1–3 days |
| Gmail | Gmail report | 1–3 days |
| Drive | Drive report | 2–6 days |
| Google+ | Google+ report | 1–3 days |
| Mobile | Mobile report | 1–3 days |
| Apps usage activity | ||
| Files owned | Drive report | 2–6 days |
| Total Emails | Gmail report | 1–3 days |
| Total Storage Used (MB) | Quota report | 1–3 days |
| Audit | ||
| Admin | Admin audit | near real time (couple of minutes) |
| Login | Login audit | tens of minutes (can also go up to a couple of hours) |
| Drive | Drive audit | near real time (couple of minutes) |
| Calendar | Calendar audit | tens of minutes (can also go up to a couple of hours) |
| Mobile devices | Mobile audit | near real time (couple of minutes), up to 4 hours, if updated at next sync. |
| SAML | SAML audit | near real time (couple of minutes), up to 3 hours, if updated at next sync. |
| Token | Token audit | tens of minutes (can also go up to a couple of hours) |
| Groups | Groups audit | tens of minutes (can also go up to a couple of hours) |
| Email log search | Email audit | near real time (couple of minutes) |
Retrieving report or audit log data for very old dates or large time ranges may take so much time that once results are available the most recent log entry may no longer be fresh. For applications that require real-time log monitoring use a small time range.
Here's the data retention times for each Admin console audit log or report:
How long is data saved?
You're able to access saved Admin console audit logs and reports data this far back:
|
Audit log or report name |
Data retention time |
|---|---|
| Admin audit log | 6 months |
| Calendar audit log | 6 months |
| OAuth Token audit log | 6 months |
| Mobile audit log (Google Apps Unlimited) | 6 months |
| SAML audit log | 6 months |
| Drive audit log (Google Apps Unlimited) | 6 months |
| Email log search | 30 days |
| Account activity reports | 6 months |
| Security reports | 6 months |
| Groups audit log | 6 months |
| Audit data retrieved using the API | 6 months |
| Reporting data retrieved using the API | 15 months |
For any audit log or report not mentioned above the retention time should be 6 months.
For more information about data retention and lag times, kindly visit: Data retention and lag times