Fortinet black logo

Handbook (HTML)

Viewing and managing the audit trail records

Copy Link
Copy Doc ID 73ac471a-9afd-11ea-8862-00505692583a:408293

Viewing and managing the audit trail records

To view the local audit trail, in the navigation menu, click Administration > Local audit trail.

Column Description
Timestamp The date and time of the action.
Action The action that occured.
By

The name of the account that performed the action. For example, the admin account.

Note: When FortiDB invokes actions such as scheduled scan, scheduled archive, start FortiDB, and stop FortiDB, “internal” is displayed in this column.

Location

The location where the action occurred. For example, local or the remote location where the account logged in, which is displayed as an IP address or host name.

Note: When FortiDB invokes actions such as scheduled scan, scheduled archive, start FortiDB, and stop FortiDB, “internal” is displayed in this column.

Object Name The object that the action affected.

To filter the list of local audit records by date, either enter start and end dates or click the calendar icon to select dates, and then click Apply.

To sort the list, click a column heading to sort using values in that column.

Click Delete to delete the audit trail records in the selected date range.

If the Local Audit Trail global setting is enabled and you delete audit trail records, FortiDB generates an audit trail record for the delete action.

Select the Export button to export the audit trail records in the selected date range as a comma-delimited text file.

See also

Viewing and managing the audit trail records

To view the local audit trail, in the navigation menu, click Administration > Local audit trail.

Column Description
Timestamp The date and time of the action.
Action The action that occured.
By

The name of the account that performed the action. For example, the admin account.

Note: When FortiDB invokes actions such as scheduled scan, scheduled archive, start FortiDB, and stop FortiDB, “internal” is displayed in this column.

Location

The location where the action occurred. For example, local or the remote location where the account logged in, which is displayed as an IP address or host name.

Note: When FortiDB invokes actions such as scheduled scan, scheduled archive, start FortiDB, and stop FortiDB, “internal” is displayed in this column.

Object Name The object that the action affected.

To filter the list of local audit records by date, either enter start and end dates or click the calendar icon to select dates, and then click Apply.

To sort the list, click a column heading to sort using values in that column.

Click Delete to delete the audit trail records in the selected date range.

If the Local Audit Trail global setting is enabled and you delete audit trail records, FortiDB generates an audit trail record for the delete action.

Select the Export button to export the audit trail records in the selected date range as a comma-delimited text file.

See also