Audit

Description

The audit trail page allows you to query for audit records. Each action done at the Soffid console will be reported.

Here you have a list of common Advanced searches, you only have to copy, paste and search, e.g.

// User changes trace
calendar ge "2020-01-01T00:00:00.000+01:00" AND user co "admin"
 
// User actions trace
calendar ge "2020-01-01T00:00:00.000+01:00" AND author co "admin"
 
// Soffid accounts
calendar ge "2020-01-01T00:00:00.000+01:00" AND user co "admin" AND database co "soffid"
 
// Created accounts
calendar ge "2020-01-01T00:00:00.000+01:00" AND action co "C" AND object co "SC_ACCOUN"
 
// Removed objects
calendar ge "2020-01-01T00:00:00.000+01:00" AND action co "D" AND object co "SC_ACCOUN"

• Date/Time: date on which the action was performed.
• Author: user who launched the task. When the author is empty, the Syncserver launched this task.
• Purpose: is the name of the internal object (also the table of the database) which the action was performed.
• Source IP
• User: identity who performed the action.
• Information system:  details on which information system the action was performed.
• Role: details the role with which the action was performed.
• Account: if the action has taken place on an account, it will be indicated on which one in this section.
• Group: details the group with which the action was performed.
• Action: the task performed is specified.

Actions