Difference between revisions of "Audit Log"
| [checked revision] | [unchecked revision] |
m (Dweuthen moved page Auditi Log to Audit Log without leaving a redirect) |
Ltalaschus (talk | contribs) |
||
| Line 8: | Line 8: | ||
* Start MailStore Client and log on as a MailStore administrator (''admin''). | * Start MailStore Client and log on as a MailStore administrator (''admin''). | ||
* Click ''Administrative Tools'' > ''Compliance'' and then ''Audit Log''. | * Click ''Administrative Tools'' > ''Compliance'' and then ''Audit Log''. | ||
| + | *:[[File:Compliance_auditlog_01.png|center|550px]] | ||
* The events to be fetched from the audit log can be filtered by modifying the settings for ''Date Range'', ''User Name'', ''User Activity Type'' and ''Maximum Number of Results''. | * The events to be fetched from the audit log can be filtered by modifying the settings for ''Date Range'', ''User Name'', ''User Activity Type'' and ''Maximum Number of Results''. | ||
* Click on ''Retrieve''. | * Click on ''Retrieve''. | ||
* The matching events are shown in the table. To show further details of an event, double-click on the corresponding table row. | * The matching events are shown in the table. To show further details of an event, double-click on the corresponding table row. | ||
| + | |||
| + | == Exporting the Audit Log == | ||
| + | The audit log can be exported in CSV format. | ||
| + | |||
| + | * Only audit log entries from the integrated log can be exported. | ||
| + | * One CSV file is created per day. | ||
| + | * If the delete option is enabled, after a day is exported, that day will be deleted from the internal log. | ||
| + | * Only entire days can be exported. | ||
| + | * The current day cannot be exported. | ||
| + | * The timestamp of the files is in UTC. | ||
| + | * The timestamp of the entries in the files is in UTC. | ||
| + | * The process can be canceled. If the delete option is enabled, entries that have already been deleted will not be restored. | ||
| + | * Only events older than 30 days can be deleted. | ||
| + | * If the target directory already contains files, they may be overwritten. | ||
| + | |||
| + | To export, proceed as follows: | ||
| + | |||
| + | * Start the MailStore Client and log in as the MailStore administrator. | ||
| + | * Click ''Administration'' > ''Compliance'' and then ''Audit Log''. | ||
| + | * Click the ''Export'' button below the table. | ||
| + | *:[[File:Compliance_auditlog_02.png|center]] | ||
| + | * Select the date up to which you want to export the data. By default, the date 90 days in the past is selected. | ||
| + | * Select a target directory for the exported files. | ||
| + | * Select whether the exported data should be deleted from MailStore. The date will be automatically adjusted if it is less than 30 days in the past. | ||
| + | * Click ''Start''. | ||
| + | * A progress dialog will inform you about the process. | ||
| + | |||
[[de:Audit-Protokoll]] | [[de:Audit-Protokoll]] | ||
[[en:Audit Log]] | [[en:Audit Log]] | ||
Revision as of 15:00, 23 September 2025
If MailStore's own audit log is used for logging audit events (default), this audit log can be retrieved via MailStore Client.
Please note: If the Windows Eventlog is used as destination for logging of audit events, the Audit Log option at Administrative Tools > Compliance is not shown. In that case, use the your favorite method for retrieving information from the Windows Eventlog.
Retrieving the Audit Log
To retrieve information stored in MailStore's own audit log, proceed as follows:
- Start MailStore Client and log on as a MailStore administrator (admin).
- Click Administrative Tools > Compliance and then Audit Log.
- The events to be fetched from the audit log can be filtered by modifying the settings for Date Range, User Name, User Activity Type and Maximum Number of Results.
- Click on Retrieve.
- The matching events are shown in the table. To show further details of an event, double-click on the corresponding table row.
Exporting the Audit Log
The audit log can be exported in CSV format.
- Only audit log entries from the integrated log can be exported.
- One CSV file is created per day.
- If the delete option is enabled, after a day is exported, that day will be deleted from the internal log.
- Only entire days can be exported.
- The current day cannot be exported.
- The timestamp of the files is in UTC.
- The timestamp of the entries in the files is in UTC.
- The process can be canceled. If the delete option is enabled, entries that have already been deleted will not be restored.
- Only events older than 30 days can be deleted.
- If the target directory already contains files, they may be overwritten.
To export, proceed as follows:
- Start the MailStore Client and log in as the MailStore administrator.
- Click Administration > Compliance and then Audit Log.
- Click the Export button below the table.
- Select the date up to which you want to export the data. By default, the date 90 days in the past is selected.
- Select a target directory for the exported files.
- Select whether the exported data should be deleted from MailStore. The date will be automatically adjusted if it is less than 30 days in the past.
- Click Start.
- A progress dialog will inform you about the process.
