Currently, DNSFilter's audit logging is limited to Filtering Policy changes via the Policy Audit Log, which makes it difficult for MSPs managing many organizations to track down who made changes and when issues were introduced.

We'd like to see audit logging expanded to cover a much broader set of dashboard actions — organization management, Local Domains/Resolvers, user/admin accounts, network and site configurations, and ideally any configuration change made in the dashboard. This would be a significant quality-of-life improvement for any MSP trying to maintain accountability across multiple techs and client organizations.

My team recently discovered that the policy audit log only includes actions taken on policies and does not include roaming client or site configuration changes, or perhaps more importantly, changes to the universal allow and block lists.

There does not seem to be a visible LOG within DNSFilter that allows one to audit the creation and deletion of MSP organizations. I am sure this is logged and visible to DNSFilter, but it should also be surfaced to the MSP organization via the MSP console.

It would be awesome to have additional audit logs for the actions done by users within DNS Filter.

Some items would include administrative actions, sign ins, policy changes, etc.

It would also be prudent to allow these logs to be exported to a syslog server and/or a SIEM/ Soar - above and beyond the current options.

Automatic alerts/logs when all or specific roaming clients are disabled/turned off.

It would be great to log and audit admins usage of the DNSFilter console especially a summary of the reports they are generating.