Viewing Audit Logs

Before you begin

To use the audit log features, ensure:
  • You have access to a SOTI Connect instance as an administrator.
  • Enable Audit Logs is turned on under Main Menu > Global Settings > General Configuration..

About this task

Audit logs provide historical records of user activity and are useful for:
  • Ensuring compliance with industry regulations
  • Troubleshooting system issues
  • Investigating security incidents
Note: For SOTI Connect instances associated with SOTI Identity:
  • Local Users appear as SOTI Connect users.
  • SOTI Identity users appear in the same list as SOTI Connect users.

This task explains how to view, filter, and export audit logs in SOTI Connect.

Procedure

  1. From the SOTI Connect main menu, select Users and Permissions. The Users and Permissions view opens.
  2. In the left pane, select the Users tab.
  3. To view logs for all users, select Logs under "View All Users" panel. Audit logs appear in the right panel.
  4. To filter logs by log type, select a log type from the Filter drop-down list (for example, Security).
    Note: Only one filter can be applied at a time. The filter remains active until None is selected.
  5. To filter logs by time interval, select the calendar icon, define the time range and select Apply.
    Note: You can use the time interval filter together with the log type filter. The time interval filter remains active until Clear is selected.
  6. To export audit logs, select the Export icon and choose either the CSV or PDF export format.
    Note: Exported logs download to your browser’s default location as AuditReport.zip (CSV) or AuditReport.pdf.
  7. To view the logs of an individual user, select the user in the left panel. Logs associated with the user appear in the right panel. The same filter and export functionality discussed above are also available when viewing an individual user's logs.
  8. To view logs for deleted users, select Deleted User Logs.
    Note: Logs for deleted users display only the user ID, not the username, to comply with General Data Protection Regulation (GDPR) requirements.

Results

You can now:
  • View, filter, and export logs for all users, specific users and deleted users.
  • Filter logs by log type and time interval.
  • Export logs to CSV or PDF.
  • View logs for SOTI Connect and SOTI Identity users.