Audit log
The audit log keeps the history of important actions in the GIS: who did what, on which record, when and from which address.
Access
Side menu: Administration → Audits. The entry only appears with the permission to view audit logs.
What is recorded
The main modules log their sensitive operations:
- households, beneficiaries and their documents, collection imports;
- programs, donors, transfers, payments, reconciliation and operator accounts;
- complaints, assignments and complaints received from KoboToolbox;
- DLI indicators, nomenclatures, user profile;
- successful and failed logins, logouts, exports.
Logs cannot be modified or deleted from the interface.
The screen
At the top, the total number of records and cards for the four most frequent action types.
Search and filters
The search field looks in the description, the entity type and the user's email.
The Filters button opens:
| Filter | Effect |
|---|---|
| Action | One action type (see below) |
| Entity type | The types actually present in the log |
| Start date, End date | Period |
Reset clears all criteria.
Action types
Create, Update, Delete, View, Login, Logout, Export, Import, Validate, Reject, Execute, Cancel. Each type has its own coloured badge.
The table
| Column | Content |
|---|---|
| Date | Date and time |
| Action | Action type badge |
| Entity | Entity type and short identifier |
| User | Author's email |
| Description | Summary |
The table shows 20 rows per page.
Record details
The View details icon opens the full record: date, action, entity type and identifier, user, IP address, description. Depending on the action, it also shows:
- the old values, on a red background, for an update or a deletion;
- the new values, on a green background, for a creation or an update;
- the metadata, the technical context of the action.
Examples
Find who changed a household
- Open Filters and choose the Update action and the household entity type.
- Narrow the period if needed.
- Open the details and compare the old and new values.
Review logins
- Filter on the Login action.
- Look for repeated failures and unusual IP addresses.