Audit log
The audit log records what is done in the account: every time someone creates, reads, updates or deletes something, and every failed attempt. A second tab, Login history, records sign-ins and sign-outs.
Only administrators in the top organisation unit can open Audit log.
What is logged
Each entry is one operation on one resource, such as a user, a person in Personnel, an organisation unit, a device or an integration.
| Action | Meaning |
|---|---|
| Create | Something was added |
| Read | Something was opened or viewed |
| Update | Something was changed |
| Delete | Something was removed |
| Execute | An operation was run |
Failed operations are logged too, for example an attempt to open something the person has no access to.
The audit log
| Column | Shows |
|---|---|
| Outcome (icon) | Whether the operation succeeded |
| Timestamp | When it happened |
| Actor | The person in Personnel who did it |
| User | The care recipient it concerned, if any |
| Action | Create, Read, Update, Delete or Execute |
| Resource | What kind of thing it concerned |
| Operation | The operation that was run |
| Description | More about the outcome |
Action and Resource are hidden by default. Turn them on in the column list.
Select the arrow on a row to see all details of the entry.
Find entries
- Choose the period: last 2 days (default), last 7 days or last 30 days.
- Use Search by operation to show only some operations, and the filter field to search in the list.
- Select Load more or Load everything when not all entries for the period are loaded.
Summaries
Show summary counts entries per operation and outcome. Show entity summary counts them per resource, and Show role summary per role.
Login history
Open the Login history tab to see sign-ins and sign-outs.
| Column | Shows |
|---|---|
| Timestamp | When it happened |
| Staff member ID | The person's ID |
| Staff member | The person's name. Shows Staff member deleted if the person has been deleted. |
| Event type | Login, Login error, Logout, Logout error, Federated identity link or Federated identity link error |
| IP address | Where the sign-in came from |
| Error | The reason, for a failed sign-in or sign-out |
Choose the period the same way as in the audit log, and filter by event type.
Good to know
- Entries are kept for two years. Older entries are deleted automatically.
- Deleting a person doesn't remove their entries.
- Each person in Personnel has their own Audit log and Login history on their page.
- Each user has an Audit log tab with the entries about that user. Technicians see it; Responders don't.