Hi there, Sharon.

I understand how concerning it can be to see unexpected changes and strange entries in your audit log, especially at a time when you weren't logged in. Let's delve into what might be happening and how we can address it.

To begin, let's take a closer look at the specific entries in the audit log. Pay attention to the Event and Changed by fields to identify if it was an automated action or triggered by a user. If you see a user you don't recognize, it’s most likely one of these:

• Online Banking Administration: Shows a change related to your connected bank accounts made automatically by QuickBooks Online.
• Support Representative: Shows changes made by a QuickBooks Online support consultant.
• System Administration: Shows changes made automatically by QuickBooks Online. This can happen for a number of reasons, such as:
  • Changing a record, and the change affects another record. For example, if you edit a payment and link it to a different invoice, you may see a System Administration event for a change to the original invoice.
  • Connecting to a third-party app to QuickBooks. When the third-party app sends data to QuickBooks, or when it makes a change to your existing data, this appears as a System Administration event.
  • Creating recurring transaction, such as a recurring expense. When QuickBooks automatically adds an instance of the transaction to your books, a System Administration event appears in the audit log.
  • Setting up other events to happen automatically, even when you’re not signed in. For example, a System Administration event may appear when there's an update to your bank feeds.
• Import Administration: Shows an automatic change related to the conversion of your data from QuickBooks Desktop edition.

If you suspect unauthorized access or suspicious activity, consider changing your QBO password and enable two-factor authentication.

Feel free to reach out again if you have further concerns about using audit logs in QuickBooks Online. We're always here to ensure your QBO experience is secure and effective.

There are 8 entries that all say system administration on 09/25/24 at 3:08 am

The System Administration changes are automatically made by QuickBooks, @Sharon119. Let me explain the reasons below.

As stated by my colleague, System Administration changes can occur due to the following:
 

• Changing a record, which affects another record.
• Connecting a third-party app to QuickBooks. When the app sends data or makes changes to your existing data, this appears as a System Administration event.
• Creating a recurring transaction, such as a recurring expense. If QuickBooks automatically adds an instance of the transaction to your books, a System Administration event appears in the audit log.
• Setting up other events to happen automatically, even when you’re not signed in.
   

You can check out this article for more details: Use the audit log in QuickBooks Online.

Product and service information changes can occur due to updates from connected third-party apps reflected in QuickBooks. If no app is connected, I recommend contacting our support team. They have the necessary tools for a thorough investigation and can create a ticket if needed.

Here's how:
 

1. On your browser, sign in to your company file.
2. Go to the Help menu.
3. Select Contact Us, then choose a topic to connect with the right expert.
    

Additionally, you can check out this article for the support scheduled hours: QuickBooks Online Support.

Furthermore, you can refer to these articles if you want to make changes to your account information to enhance security:

• Update or change your Intuit Account sign-in information
• Secure your Intuit Account and prevent lockout with extra verification methods
   

Well I was on a chat for over an hour starting at 8:22 am and we kept looking at the same thing and the problem was still not resolved. VERY disappointed with Quick Books. Then I asked for a copy of the chat and when I received it it shows the chat starting at 10:23 pm. Not satisfied at all