Introduction
Since Delft-FEWS 2019.02 both the FEWS Operator Client and the Admin Interface generate audit trail event log messages of INFO level for user actions that change the status of the FEWS system. The log messages can be inspected in the Admin Interface on the View Logs page or in the 08 System Monitor page of the Operator Client. By default the system log messages are stored in the database for a period of 31 days.
Audit trail event codes are in the following format:
SYSLOG.[COMPONENT].[ACTION].[WORKFLOWID]
COMPONENT:
- AI: Admin Interface event codes
- OC: Operator Client event codes
ACTION: The manual action that triggered the event code. For example: AddScheduledTask.
WORKFLOWID: Depending on the action the id of the workflow the action is applied to, will be added to the event code.
Admin Interface audit trail event log messages
Admin Interface audit trail event codes are in the following format:
SYSLOG.AI.[ACTION].[WORKFLOWID]
For example, when a user schedules a new task using the admin interface, a log message with the following event code is generated:
SYSLOG.AI.AddScheduledTask.Import_Coastal_Forecast
The log message itself will start with the username that triggered the action, followed with some context information. For example:
ekkelenkamp - Added Scheduled Task with task id: 'ukeafffsmc00:000169070_00000001'
For an overview of all the audit trail event codes that can be generated by the Admin Interface, see Admin Interface audit trail event log messages
Operator Client audit trail event log messages
Operator client audit trail event codes are in the following format:
SYSLOG.OC.[ACTION].[WORKFLOWID]
For an overview of all the audit trail event codes that can be generated by the Operator Client, see Operator Client audit trail event log messages