Question

Audit Tracking - does not show how doc got from one folder to another

Version 9 Laserfiche

Updated November 26, 2015

asked on November 25, 2015 • Show version history

I have run an audit report on one document using the ID#. The report shows me when it was created and when it was moved from folder to folder, however, it missed one move. The only explanation I can think of is that the Audit records do not track Cut and Paste actions. Is that possible?

August 7th - Document imported into Incoming Scans (lets call it File Folder A)

August 10th - Document moved from Folder A to Folder B.

November 24th - Document moved From Folder C to Folder D.

QUESTION IS: Why is there no Audit record of when it was moved from Folder B to Folder C?

0 0

Replies

replied on November 25, 2015

The Move Entry event will cover cut/paste actions. Perhaps it was a different user that moved the document from Folder B to C and that user may not be configured to have entry events audited. Please confirm that the user who moved the document from Folder B to Folder C has the same events being audited as the other user(s) who moved the document between Folders A and B and Folders C and D.

0 0

replied on November 25, 2015

Alexander, all of our users are being audited the same. No one is excluded from any auditing, including the Workflow user, so whomever it was should have shown up.

We don't know who moved it, so we can't question them as to how it was done.

0 0

replied on November 25, 2015

Ahhh, I think I figured out why it doesn't show this move! There has been a staff change and the old employee Windows Account has been deleted. In this case, it would have been that old employee that would most likely have made the move. This makes sense.

So then, can you confirm that if a Windows Account is deleted, all Audit Trail records of what was done by that employee are removed. ??

0 0

View 3 previous replies

replied on November 25, 2015

Can you clarify what you mean by the Windows Account being deleted? Was the user just deleted from Laserfiche or do you mean the user was deleted from Active Directory?

0 0

replied on November 25, 2015

I opened the LF Admin Console, clicked on Users and Groups, then Windows Accounts, then right-clicked on this user and deleted them.

0 0

replied on November 25, 2015

The actions performed by that user would still be audited and in the audit report, the login name should still display properly as domain\username. If the issue is that none of the actions performed by this user are audited, then I suspect that the audit settings for that specific user (when they were still in the Laserfiche repository) may have been set to "selected events" as opposed to "group membership" and it could be that the events chosen to be audited for that user did not include entry events.

0 0

replied on November 26, 2015

So, any other ideas? I know that auditing is not the issue. That employee was audited for much of her work prior to her leaving. It must be something else.

0 0

replied on November 26, 2015

What is the Audit Trail date range configured as? Are there any gaps that could account for this?

0 0

replied on November 26, 2015

I had the date range set for "Beginning at" with no end date. The results showed the creation date, the first move (did not show the second move) and then showed the third and final move.

0 0

You are not allowed to follow up in this post.

Question

Question

Audit Tracking - does not show how doc got from one folder to another

Replies

Sign in to reply to this post.