User added 40 values in multi value field and removed 35 to fix indexing. I can't find audit for values removed. That is showing wrong data on report. because document actually has only 5 values for that field. I tried modify field event_type but can't find any row for that. Is removing value audited?
Question
Question
What is the event_type in audit history when values in multi value field are removed?
Answer
See below of what the entry_events view in the Audit Trail database looks like:
You'll need to group the events by event_id to determine what field change actions occurred together.
Replies
The "Write Field Value" event type will record that action. See the below screenshot which shows the scenario where a user added the values: A, B, C, and D to a multivalue field. Then the user removed the values C and D.
Regards
I am pulling the information from database. It returns one row for each value added. So it doesn't show removal. It only shows value set. When I pulled audit report on server.like you mentioned, it shows the expected output. But my report is based on sql data. Since it's not a separate event_type, 50 rows are shown as value set.
It would depend on how the values are being added or removed from the field, i.e. one at a time with the document being saved each time in between or if the field changes are done in bulk.
The "Write Field Value" event will record the action each time the field is changed and document saved, and it will just show what values are currently in that field. From the screenshot in my previous post, a user added A, B, C, and D at the same time and then saved the document. Then a minute or so later, the user removed the values C and D and then saved the document again. That's why there's only two events.
See the screenshot below of what it would look like if the user added and removed the field values individually:
What does it look like in str_val field for you in database where prop_name is 'Multivalue' (fieldname)? Str_val doesn't show values separated by commas for me. Just one value at a time. I'm pulling by query. Where prop_name is fieldname and event_type is 28.
See below of what the entry_events view in the Audit Trail database looks like:
You'll need to group the events by event_id to determine what field change actions occurred together.
That helped. Thanks!
You're welcome