Finding specific active audit events

To generate active audit events to find and view, online audit logging must be configured - see Audit Options.

You can search for Content Manager active audit events using practically any of the information about them that is saved in Content Manager.

However, the quickest way to view audit events for an item in Content Manager is to:

  1. Right-click the item or tagged items, and on the Security and Audit menu, clicking Active Audit Events
  2. Optionally, in the list of events, tag the ones you want to see more detail of, and on the right-click menu, click More Details.
    Content Manager displays a list of all the changes that were carried out within the selected active audit events.
    Sorting the list by Description or lining up old and new values in the view pane may help in analysing the activities.

These are the additional ways of finding the events you are looking for:

This is the pane in the main Content Manager window under the toolbars.

Use the fields:

  • Search For - select Historical Events
  • Search By - use KwikSelect to select a search method, for example record to find events for a specific record, or login to find events for a specific login
  • Matching criteria - enter the data to find, for example, record number or login name
  • Run the search button - click to start the search

See Search pane.

  1. On the Manage ribbon, click Online Audit Log
  2. Right-click the list and on the Search menu, click Refine Search.
    The Search for Historical Events dialogue box appears.
  3. Use the Boolean search editor, or, to use the options below, switch to the multi-field editor:
    • For Record - enter a record number to find events relating to a specific record
    • For Location - enter a Location to find events that were logged for a specific login which relates to that Location. Content Manager uses the login for the Location that you entered, or you can type the login directly.
      • Include all domains that have this login - select to find events for the user across all domain names across all domain names
    • For Date Range - to refine the search to find only those events performed within a specific date range
  4. Optional - select the Sort/Filter tab to refine your search results further:
    • Sort Descending - select to sort the results in descending order
    • Security Violations Only - select to find only security violations
    • Event Type Filters - tag the events to appear in the active audit event search result

      NOTE: A search only find events that have actually been logged. To log events for a record, the event must be selected in the Audit page of the Record Type Properties.

  5. Click OK.
    Content Manager returns the active audit events that match your criteria.
  6. Optional - if detailed summaries are set up, select an event to see its detailed summary in the view pane, against the field Summary Information (Text). See Audit Options, General tab.

See Search for ... dialogue boxes for more information.

The search string editor enables you to use the full capabilities of Content Manager searching, combining potentially large numbers of criteria, and using advanced filter and sort options. See Using the string-based search editor.

Related Topics Link IconRelated information