Viewing Logs

Authorized users with the correct permissions can use Audit Viewer to search and inspect key user actions within the Cogynt application from the last 90 days.

Viewing Logs within a Date Range

Logs can be filtered using the date range filter element at the top of the screen. This filter includes various time options:

• Today
• This Week
• Last Week
• This Month
• Last Month
• Custom Date Range (a user-defined start and end date/time)

Searching Logs

The search box allows performing text searches to return any audit logs matching the search term. When performing a text search, the following fields on an audit log are queried to determine whether there is a match with the search term:

• A Timestamp of the logged object.
• Object Type: The type of object the audit log was created for.
• Audit Action: The action the audit log was created for.
• Change Type: Whether the user-performed action was a Create, Update, or Delete of the item the action was performed against.
• Object Reference: The system-generated ID for the object that an action was performed against. For example, if a collection (case file) is created in Workstation, the "Object Reference" is the unique system ID for that collection. Searching by this object reference finds any audit logs generated for that specific collection.
• User: Actions triggered by specific users. Upon typing in the search box, if any user account matches the term searched, a visual element appears that allows selecting the user account.

Multiple search terms can be applied in the Search box. The search operates in an "or" manner, and returns any audit logs that fulfill at least one of the search terms.

tip

Searching for the term "collection" and by the user "John Smith" returns any audit logs that contain either "collection" or "John Smith" in any of their fields.

Filtering The Audit Log

Audit log entries can be filtered by:

• Audit Actions
• Change Type
• Object Type
• Date Range
• Users

To filter the audit log:

1. At the top of the audit log, click Filter By.
2. Select your filter from the available options. More than one filter is possible.

To reset filters:

1. At the top of the audit log, locate the filter(s) to reset.
2. Reset the filter(s):
   1. Click the X close icon next to any single filter.
   2. Click the dropdown menu on multiple filters. Next:
      1. Click the X close icon next to any single filter
      2. Click Reset Filter to reset all filters from this group.

Viewing Detailed Audit Information

To view more detailed information for each audit log, click the View button to open a detail panel to inspect the information. The detail panel displays the following information:

• Timestamp: What time the action was performed.
• Object Type: The system-generated ID for the object that an action was performed against.
• Change Type: Whether the user-performed action was a Create, Update, or Delete of the item the action was performed against.
• User: The user that performed the action.
• Object Reference: The system-generated ID for the object that an action was performed against.
• Client IP: The IP address of the client used by the user.
• Audit Action: The action the audit log was created for.
• Object Information: An expandable view of the data on the object that was changed.
  • To the right side of any object, click the Copy icon to copy that object's field contents or ID.
  • Some objects include timestamps when they were created_at or deleted_at.
  • Other fields include values added to the object in the logged action.