My thoughts on everything mobility and MDM, more specifically with the Wavelink Avalanche 6.0 MDM


Sunday, November 9, 2014

Avalanche 6.0 Configuring Audit Logs

A very useful feature is to enable Audit logging. This can log a variety of audit information like which user has logged on/off, group, folder and profile modification and scheduled events. 

To enable logging:

1. Go to Tools - System Settings and click on Audit Logging Setting: Disabled. Or if it already enabled, click on Enabled to modify settings. 



2. In the Audit Log settings select Enable logging. 

The audit log will by default store 200,000 actions in the database after which they will be overwritten. 
To save the audit log, select the Enable Auditlog Archiving. The time of day to archive can also be selected. The archived information is stored as a csv file in the same location as the backup.

3. Select the events to archive and click Save. 

To view the audit logs:
1. Click on Tools - Audit Logs. 


The audit logs can be filtered by:
1. Date Range
2. IP Range
3. Activity Type 
4. Username. 
Once selected click on Apply Filters to display the logs. 


I made a change to the profile selection criteria to see what information is available in the log. The log shows that a change was made to the profile but does not show in detail what part of the profile was changed or what criteria was changed. 

The test profile had no selection criteria and I added selection criteria ModelName = MOTOMC3100. For this profile change the below got recorded in the audit log.



No comments:

Post a Comment