Skip to main content
Documentation

 

Druva Documentation

View Admin Audit Trails page

  1. Last updated
  2. Save as PDF

Overview

The Admin Audit Trails page gives you an insight into all administrator activities performed on Phoenix Management Console. This page lists each activity and provides the corresponding details over a specified duration. The page also provides various filters to list the activities based on your selection. For example, you can use the filters to list the activities specific to a resource, entity, action, organization, administrator, and time. You can also use the Admin Audit Trails page to generate a custom report based on the populated activities. For more information about the Audit Trails Report, see Admin Audit Trails Report.

Access path

  1. Log in to the Phoenix Management Console.
  2. The Admin Audit Trails page opens.

Admin_Aduit_Trails_Page.png

Field Description

The following table describes the fields on the Admin Audit Trails page.

Field Description

Administrator

The name of the administrator who performed the action.

Action

The action performed by the administrator. For example, Create, Update, Delete, Login, Backup Now, and so on.

Entity Type

The type of the Phoenix entity on which the administrator performed the action. For example, Admin Group, Backup Set, Billing Cost Code, Admin, and so on.

Entity Name

The name of the Phoenix entity on which the administrator performed the action.

Resource Type

The type of the Phoenix resource associated with the entity. For example, Files, MS-SQL, CloudCache, VMware, and so on. If an admin creates the My_config_rule entity of type VM Auto Config Rule, the resource type of the entity is VMware.  

Organization

The name of the organization to which the entity is associated with. The actions performed on the global dashboard, such as SSO settings, cost allocation, and so on, are accounted under All Organizations.

Time

The timestamp of the action performed by the administrator.

Admin Audit Trail filters

Phoenix provides a wide array of filters to view details of the administrator activities on Phoenix Management Console. The filters can be applied concurrently along with the Time filter to fetch the Audit Trail Report on the Admin Audit Trail page. For more information about the Audit Trails Report, see Admin Audit Trails Report.

The following table lists the audit trail filters.

Filter Description

Resource  Type

The type of Phoenix resources. The resource list includes All Resources, File Server, MS-SQL, NAS, VMware, Hyper-V, CloudCache, Disaster Recovery, Configuration, Billing, and Device Config. 

By default, the Resource Type list displays the All Resources value.

Entity Type

The entity on which the administrator performs the action. The values of this filter appear based on the resource type you select. For example, if you select File Server in the Resource Type list, the Entity Type list displays values corresponding to File Server, such as Content Rule, Backup Policy, Backup Set, and Server, respectively.

By default, the Entity Type list displays the All Entities value.

Action

The action performed by the administrator. The values of this filter appear based on the resource and entity types you select. For example,  if you select File Server in the Resource Type list and Content Rule in the Entity Type list, the Action list displays action values corresponding to the selection, such as Create, Update, and Delete.

By default, the Action list displays the All Actions value.

Organizations

The organization to which the entity belongs to. You can select All Organizations or your specific organization to which the entity is associated with.

By default, the Organization list displays the All Organizations value.

Administrator

The administrator who performed the activity. You can select All Administrators or the specific administrator who performed the activity. 

By default, the Administrator list displays the All Administrators value.

Time

The timeframe to track audit trail. The values include Last 24 hours, Last 7 days, Last 30 days, Last 3 months, Last 6 months, Last 1 year, Last 5 years, and Custom. If you select Custom from the list,  Phoenix displays the From and To Calendar lists. Select the dates from the lists to specify the duration in which the activities were performed.

Actions

The following table lists the actions on the Admin Audit Trails page.

Action Description

Download

Downloads the list of administrator activities in either the HTML or CSV format.

View Details

Displays the action details of the selected activity. For the edit and upgrade actions, the Action Details page displays the previous and the new values of each parameter as shown in the following screenshot:

backup_set_name_audit trail.png

The Action Details page displays the following fields:

  • Administrator: The name of the administrator who performed the action.
  • Time: The timestamp of the action performed by the administrator.
  • Source IP: The IP address of the system on which the administrator performed the action.
  • Organization: The name of the organization to which the entity is associated with.
  • Resource Type: The Phoenix resource associated with the entity.
  • Entity Type: The type of the Phoenix entity on which the administrator performed the action. 
  • Entity Name: The name of the Phoenix entity on which the administrator performed the action.
  • Action: The action performed by the administrator.  For the edit and upgrade actions, the Action field displays the previous and the new values of each parameter.
  • Quarantined files: List of all the quarantined files selected from search results.
  • Deleted files: List of all the deleted files selected from search results.

Clear Filters

Resets the applied filters.