Entuity Audit Logs

Introduction to audit logs

To access audit logs

Note on User Impersonation mode

Introduction to audit logs

The Audit Log provides a central point for viewing and analyzing actions performed on Entuity.

You can access the Audit Log if you are an Administrator or have the View Audit Log tool permission. Please see this article for further help and information on group and user permissions in Entuity.

By default, Entuity maintains audit log entries for 60 days, after which entries are deleted. You can amend this time period through entuity.cfg and the variable auditLogKeepTime. Log files are by default saved to entuity_home\log.

Entuity Audit Log records actions performed on:

• events.
  • additions to, modifications and deletions of event suppression definitions defined through the Event Suppressions page.
• threshold settings.
  • modifications to event thresholds, amending threshold values, disabling a threshold.
• account management.
  • creation and deletion of user accounts.
  • changing of account passwords.
  • changing of user group membership.
  • creation and deletion of user groups.
  • change in associated tool permissions.
  • enabling of LDAP internal and external authentication.
• configuration management.
  • changes to configuration management tasks.
  • create, modify, delete task schedule.
  • execute task actions.
  • name of the user who made a manual configuration management retrieval request.
• asset management.
  • additions, deletions and modifications to managed inventory.
  • additions, deletions and modifications to discovery profiles (Entuity v20.0 P03 upwards).
  • include zone management actions: zone creation, deletion and modification.
• context menu port object settings.
  • fast utilization polling.
  • fast status polling.
  • status event.
  • manage or unmanage ports.
• View management.
  • View creation, deletion and modification.
  • details include domain, event or incident filter, and group changes.
• report scheduling.
  • creation, manual deletion, suspension and resumption of report scheduling.
• reporting (Entuity v20.0 P03 upwards):
  • runs of scheduled and non-scheduled reports.
• SurePath (Entuity v20.0 P03 upwards):
  • creation, modification and deletion of SurePath paths.
• Entuity services(Entuity v20.0 P03 upwards):
  • creation, modification and deletion of Entuity services.
• OS rules (Entuity v20.0 P03 upwards):
  • creation, modification and deletion of OS rules. Note, bulk deletion of OS rules are not audit logged, only individual deletions.

To access audit logs

1. Click the Main Menu and then System Information.
2. On the System Information page, click Show Audit Logs in the top right of the browser or via the Overflow Menu.
   
   
   
   
3. The Audit Log page will open.
4. Click here for help on how to configure, export, filter and sort the table on the Audit Log page. There are very many log files in the Audit Log, so it is recommended that you use the Filter Table functionality in the top right of the page to find information more easily.
   
   

Note on User Impersonation mode:

Entuity v20.0 P04 introduced User Impersonation mode. Audit log entries are created when an impersonation begins and ends. For further help and information on audit logging for user impersonation, please see this section.