Skip to main content

Using the QuickBooks Online Audit Log to Investigate Missing Payments

When you encounter a payment that appears in LeanLaw but isn't showing in QuickBooks Online—or vice versa—the QuickBooks Online audit log is often your first investigative tool.

Steve Owings avatar
Written by Steve Owings
Updated over 2 months ago

This guide will walk you through accessing the audit log, locating deleted transactions, and using that information to troubleshoot payment discrepancies.

Why the Audit Log Matters

The QuickBooks Online Audit Log tracks every action taken in your QuickBooks Online company file, including transactions that have been deleted or voided. When a payment is deleted in QuickBooks Online but remains visible in LeanLaw, it typically means:

  • Someone manually recorded the payment in QuickBooks Online and then deleted it

  • The deletion happened after the payment was synced to LeanLaw

  • LeanLaw is showing the orphaned record while QuickBooks Online no longer reflects it

By reviewing the audit log, you can identify who deleted the transaction, when it was deleted, and what the original transaction details were—information essential for resolving client disputes and maintaining accurate records.

Step 1: Access the Audit Log

  1. Log in to QuickBooks Online

  2. Click the gear icon (⚙️) in the upper right corner

  3. Under "Tools," select Audit Log

  4. You'll see a list of recent transactions with columns showing: Date Changed, User, Event

Step 2: Filter for Deleted Transactions

  1. In the Audit Log page, look for the Event column

  2. Click the dropdown filter next to "Action"

  3. Select "Deleted/Voided Transactions" to narrow results

  4. Click Apply to see only deleted/voided payments

Tip: Use the date range filters to narrow your search to when you suspect the payment was deleted.

Step 3: Interpret What You Find

Once you've located the deleted payment, the audit log shows:

Column

What It Tells You

Date Changed

When the payment was deleted

User

Who deleted it (user name or "Automatic" if system-generated)

Action

Whether it was deleted or voided

Entity

The type of record (should show "Payment")

Details (click to view)

Original payment amount, customer, date, and method

Example scenario: If a payment shows as deleted by "Sarah Mitchell" on October 28 at 3:15 PM, you now have specific information to discuss with Sarah or your accounting team about why it was removed.

Step 4: Compare with other records

Once you've confirmed the deletion in QuickBooks Online, you need to verify the payment status in two separate locations:

Check LeanLaw Records

  1. Log into LeanLaw

  2. Navigate to BillingInvoices (or access the invoice directly)

  3. Locate the invoice showing the payment discrepancy

  4. Note the payment details, amount, and date recorded in LeanLaw

  5. If the amounts and dates match the deleted QuickBooks Online transaction, this confirms the payment was deleted in QuickBooks Online but remains in LeanLaw

Check Confido Legal's Audit Log

Confido Legal maintains its own internal audit log. This shows who created, modified, or deleted payments within the Confido system:

  1. Log into Confido Legal

  2. Navigate to the Audit Log (typically found in Settings or Admin section)

  3. Filter for the relevant date range when the payment was recorded

  4. Look for entries showing the payment creation/modification

Step 5: Take Action

If a payment was accidentally deleted in QuickBooks Online:

  • Option A: Re-enter the payment in QuickBooks Online if it was legitimate

  • Option B: If the payment should not have been recorded at all (manual entry error), contact Confido Legal support to have them delete the orphaned record from their backend. This will sync the deletion back to LeanLaw.

  • Option C: Contact LeanLaw support if you need help identifying which scenario applies to your situation

Common Scenarios & What to Look For

Scenario 1: Client Says Payment Wasn't Made

  • Check the audit log for who deleted it

  • Review the original QuickBooks Online transaction details

  • Confirm with your team whether this was intentional

Scenario 2: Manual Payment Entry Error

  • The audit log will show the payment was created and then deleted by a user

  • If the deletion was accidental, you can re-enter it

  • If it was intentional, follow up with the person who deleted it to confirm why

Scenario 3: System-Generated Deletions

  • If the audit log shows "Automatic" or a system process deleted the payment, this may indicate a sync issue between LeanLaw, Confido Legal, and QuickBooks Online

  • Contact LeanLaw support with the payment details and date for investigation

When to Contact Support

Reach out to support@myleanlaw.com or use the Live Chat button in LeanLaw if:

  • The audit log doesn't show the payment at all (suggesting it may have been deleted outside QuickBooks Online)

  • You're unsure whether to re-enter the payment or request deletion from Confido Legal

  • The QuickBooks Online deletion doesn't match the date the payment appears orphaned in LeanLaw

  • You need help reconciling multiple deleted payments across systems

Related Articles

Did this answer your question?