The Audit page displays the audit trail for actions performed by all entities in Orchestrator.

The Audit page can be opened from the User menu.

Filtering the Events in the Audit Page

The data in the Audit page can be filtered by several criteria, namely Component, User, Action, and Time:

Component

Filtering by Component, the following components are available:

• Assets
• Comments
• Credential Stores
• Directory Service
• Environments
• Execution Media
• Folders
• Jobs
• Libraries
• Licenses
• Machines
• Maintenance
• Monitoring
• Packages
• Processes
• Queues
• Robots
• Roles
• Triggers
• Settings
• Task Catalogs
• Tasks
• Units
• Users
• Webhooks

User

The User filter enables viewing changes performed by a certain user.

Exporting the Audit Page as a .CSV file

Audit logs of on-premises Orchestrator instances are retained until you perform a database maintenance or you manually delete them.
If you would like to store logs on your local device, you have the option to export them as a CSV file.

To download tenant-level audit logs:

1. From your tenant, navigate to the Audit page.
2. Apply filters to logs, if necessary.
3. In the top right, click Export.
   A download begins for the file audit_logs.csv.

To ensure the best performance, please note that the exported entries are not in reverse chronological order.

Action

The Action filter contains the following actions that the Audit page logs details about:

• Acknowledge
• Activate
• Assign
• Associate
• Bulk Upload
• Changed Password
• Change Status
• Create
• Deactivate
• Delete
• Download
• End
• Import
• Password Reset Attempt
• Reset Password
• Skip
• Start
• Start Job
• Stop Job
• Toggle
• Unassign
• Update
• Upload

Time

The Time filter makes it possible to view the events according to the time they happened. The following intervals are available:

• Last hour
• Last day
• Last week
• Last 30 days

The Audit Data Window

Further information about an event can be displayed by clicking the View Details button, in the Audit Data window.