Since FEWS 201902 both the FEWS Operator Client and the Admin Interface generate audit trail event log messages of INFO level for user actions that change the status of the FEWS system. The log messages can be inspected in the Admin Interface on the View Logs page or in the 08 System Monitor page of the Operator Client.
Audit trail event codes are in the following format:
SYSLOG.[COMPONENT].[ACTION].[WORKFLOWID]
COMPONENT:
- AI: Admin Interface event codes
- OC: Operator Client event codes
ACTION: The manual action that triggered the event code. For example: AddScheduledTask.
WORKFLOWID: Depending on the action the id of the workflow the action is applied to, will be added to the event code.
Admin Interface audit trail event log messages
These event codes follow the following format:
SYSLOG.[COMPONENT].[ACTION].[WORKFLOWID]
For example, when a user schedules a new task using the admin interface, a log message with the following event code is generated:
SYSLOG.OC.AddScheduledTask.Import_Coastal_Forecast
The log message itself will start with the username that triggered the action, followed with some context information. For example:
ekkelenkamp - Added Scheduled Task with task id: 'ukeafffsmc00:000169070_00000001'
For an overview of all the event codes that can be at: TODO
Operator Client audit trail event log messages
These event codes follow the following format:
SYSLOG.[COMPONENT].[ACTION].[WORKFLOWID]
For example, when a user schedules a new task using the admin interface, a log message with the following event code is generated:
SYSLOG.OC.AddScheduledTask.Import_Coastal_Forecast
The log message itself will start with the username that triggered the action, followed with some context information. For example:
ekkelenkamp - Added Scheduled Task with task id: 'ukeafffsmc00:000169070_00000001'
For an overview of all the event codes that can be at: TODO
