You are viewing limited content. For full access, please sign in.

Question

Question

Advanced Audit Trail

asked on October 29, 2015

If a users audit settings are set to audit everything except:

Custom Audit, Entry Listing, Export and Print, View Content.

What would cause a document to have an Modification Date with a Last Modified By value set to this user but there are no events corresponding to this date/time in the audit trail?

0 0

Answer

SELECTED ANSWER
replied on October 30, 2015

No, when an event is not audited for the user, the server does not log their actions.

0 0

Replies

replied on October 29, 2015

The Audit Trail reporting database doesn't generally contain all of the audit information for your repository, you have to configure it with the information you want to report on.  Are you seeing other events from about that same date and time?

0 0
replied on October 30, 2015

Hi Brian,

Yes, I am seeing other events from the same date and around the same time.   I also see other events by this same user on other dates.  The concern is that in the Client we can see that this user modified many files in a bulk transaction - the modification times are either the same or a few seconds apart but there is no record of what they did in Audit Trial. 

 

Thanks

0 0
replied on October 30, 2015

Just to double-check, the user's audit settings were the ones you mentioned above before that time period you're looking at, right? They weren't changed afterwards to include modification events.

0 0
replied on October 30, 2015

Hi Miruna,

The user's audit settings were the ones mentioned above during this time.  I can see other modification events from this user close to the date/time in question.  There is no record of any changes for Auditing for the month surrounding the events either.  

Thanks,

Jen

0 0
replied on October 30, 2015

I discovered that we were looking at the wrong year for these events.  This user's account was not being properly audited last year and we changed it.  It appears that Audit Trail is working as expected.  

Since this user was not audited during these events, is it possible to query any of the SQL tables for history on their actions?

0 0
SELECTED ANSWER
replied on October 30, 2015

No, when an event is not audited for the user, the server does not log their actions.

0 0
replied on October 30, 2015

Okay. Thanks for your help.

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.