Audit#

The "Audit" screen contains the "Audit" table, which is a list of event messages that occurred within the Orchestrator:

The table displays information about:

  • account creation/deletion;
  • user creation/deletion;
  • login attempts (successful/unsuccessful) by users;
  • user manipulations with various Orchestrator objects.
No.Interface ElementDescription
1."Type" columnType of information.
2."Time" columnDate and time of the event.
3."Account" columnAccount name.
4."User" columnUser name.
5."Message" columnEvent message.
6."Agent" columnAgent (User-Agent browser) from which the event occurred.
7."Record GUID" columnUnique identifier that can be used to search for a specific event in the system.

To view the record of an event that occurred in the Orchestrator as a card, you need to click

Change history and diff#

Audit read permission is required to view diffs and entity history.

A User with Audit read permission can open an event card to see the full diff: which fields and values changed. To view the history of one entity, select one row in the table and click "Show history". The Orchestrator finds the entity reference in the diff and opens a timeline of its events.

Select an event on the timeline. The changed fields and their "Old" and "New" values appear on the right. "Open diff" shows the complete diff for the selected event. If an event has no entity reference, its history is unavailable and the interface displays a warning.