Filter Audit Log Views

The ability to filter the Audit Log list for Metadata and User Agent operations is available in FileCloud version 18.2 and later.


Since every operation is logged and displayed in the Audit screen, the display will show a lot of information and there may be times when you only want to see a specific event.

For example, if you want to see if a specific user was able to login but hundreds of operations are occurring on the server, finding your user may be difficult.

Therefore, you can search or filter your views to find the information you need.

 

(lightbulb) The audit log can also be sorted, trimmed, or filtered after exporting it to a CSV file. Exporting the audit log can also reduce the size taken up in the database.


Filtering your view of log entries does not trim or decrease the size of your log database.

If your log database is growing too large, you can:

Export Audit Logs
Configure What is Logged
 Delete Audit Log Entries

 Compact the Audit Database


How do you want to filter the Audit log?



To filter the audit log by searching:

  1. Open a browser and log in to the Admin Portal.
  2. From the left navigation panel, click Audit.
  3. In the Search box, type in your key words.



To filter the audit log by date:

  1. Open a browser and log in to the Admin Portal.
  2. From the left navigation panel, click Audit.
  3. In the Filter Start Date box, select a date or type in a date in the following format: YYYY-MM-DD.
  4. In the Filter End Date box, select a date or type in a date in the following format: YYYY-MM-DD.

The Audit log can be filtered by the following operations or actions that occur on the FileCloud server:

OperationDescription
allDisplays all operations logged by FileCloud Server
common

Displays 6 of the most commonly logged operations:

  • create new account
  • login
  • create file or folder
  • upload file
  • download file or folder
  • share file or folder

This is the default filter if no other is selected.

DeletedDisplays logs created when a file or folder was moved to the recycle bin on the FileCloud Server site
UploadedDisplays logs created when a file or folder was uploaded to the FileCloud Server site
DownloadedDisplays logs created when a file or folder was downloaded from the FileCloud Server site
MetadataDisplays logs created when a file or folder's metadata was added, edited or removed
FilesDisplays logs created when a change is made to all the files on the FileCloud Server site
RetentionDisplays logs of retention policy actions.
DLPDisplays logs for failed DLP rules.
MovedDisplays logs created when a file or folder was moved to another location in FileCloud.

To filter the audit log by operation:

  1. Open a browser and log in to the Admin Portal.
  2. From the left navigation panel, click Audit.
  3. In Operation Filter, select the action or group of actions for which you want to view the log entries.

An agent is any client or device that connects or communicates with FileCloud Server.

You can select from the following user agents:

  • Web browser
  • Sync
  • Drive
  • Outlook
  • Office
  • iOS
  • Android
  • Workflow
  • Mqworker
  • FileCloud Desktop

To filter the audit log by Agent:

  1. Open a browser and log in to the Admin Portal.
  2. From the left navigation panel, click Audit.
  3. In User Agent, select which client or device for which you want to see log entries.