- Getting started
- Best practices
- Tenant
- About the Tenant Context
- Searching for Resources in a Tenant
- Managing Robots
- Connecting Robots to Orchestrator
- Storing Robot Credentials in CyberArk
- Storing Unattended Robot Passwords in Azure Key Vault (read only)
- Storing Unattended Robot Credentials in HashiCorp Vault (read only)
- Storing Unattended Robot Credentials in AWS Secrets Manager (read only)
- Deleting Disconnected and Unresponsive Unattended Sessions
- Robot Authentication
- Robot Authentication With Client Credentials
- Configuring automation capabilities
- Solutions
- Audit
- Settings
- Cloud robots
- Folders Context
- Automations
- Processes
- Jobs
- Apps
- Triggers
- Logs
- Monitoring
- Queues
- Assets
- Business Rules
- Storage Buckets
- Indexes
- Orchestrator testing
- Resource Catalog Service
- Integrations
- Troubleshooting
Orchestrator user guide
Audit
The Audit page displays the audit trail for actions performed by all entities in Orchestrator.
The data in the Audit page can be filtered by several criteria, namely Component,User,Action, and Time:
The Component filter displays the logs based on the component that performed a given action in the system.
Available Component filters:
- All
- Actions
- Assets
- Automation Solutions
- Buckets
- Captured Images
- Cloud Subscriptions
- Comments
- Credential Stores
- Credentials Proxies
- Directory Service
- Environments
- Execution Media
- Folders
- Jobs
- Libraries
- Licenses
- Machines
- Maintenance
- Monitoring
- Packages
- Personal Workspaces
- Processes
- Queues
- Remote Control
- Robots
- Roles
- Settings
- Sessions
- Triggers
- Units
- Users
- Webhooks
The Action filter displays the logs based on the type of action that was executed.
Available Action filters:
- All
- Acknowledge
- Activate
- Assign
- Associate
- Bulk Upload
- Changed Password
- Change Status
- Convert
- Create
- Deactivate
- Delete
- Download
- End
- Explore End
- Explore Start
- Import
- Move
- Password Reset Attempt
- Reset Password
- Skip
- Start
- Start delete
- Start Job
- Stop Job
- Toggle
- Unassign
- Update
- Upload
.csv file by clicking the Export button.
Further information about an event can be displayed by clicking the View Details button from the right side of the Audit page.
- Audit logs are stored in the Orchestrator database for a duration extending to at least the last six months. During this time, they are visible and searchable in the interface.
- Once per month, Orchestrator archives the audit logs for the calendar month that has moved outside the most recent six-month window. For example, the logs for November 2024 are scheduled for archival at the beginning of June 2025. Once the audit logs for a calendar month have been archived, they are removed from the Orchestrator database and are no longer searchable. However, the archived data is available for download on the tenant-level Audit page, by selecting View archived data.
- Audit log archives are available for the 18 months that precede the most recent six-month window, ensuring that the audit log data is available to you for a total period of 24 months. Archives older than 24 months are automatically deleted.
To download monthly audit data archives, take the following steps:
- In the tenant view, select Audit.
- In the Audit window, select View archived data.
- Locate the entry for the relevant
month in the list and select Download to retrieve the audit data file in
.csvformat.
The table below maps each Component with its corresponding Actions, to facilitate filtering the audited events.
|
Components |
Actions |
|---|---|
|
Actions (previously Tasks) |
|
|
Assets |
|
|
Buckets |
|
|
Comments |
|
|
Credential Stores |
|
|
Directory Service |
|
|
Environments |
|
|
Execution Media |
|
|
Folders (previously Units) |
|
|
Jobs |
|
|
Libraries |
|
|
Licenses |
|
|
Machines |
|
|
Maintenance |
|
|
Monitoring |
|
|
Packages |
|
|
Personal Workspaces |
|
|
Processes |
|
|
Queues |
|
|
Robots |
|
|
Roles |
|
|
Settings |
|
|
Sessions |
|
|
Triggers |
|
|
Users |
|
|
Webhooks |
|
The following table maps Components to corresponding Actions, so you can filter by operations.
|
Components |
Actions |
|---|---|
| |
| |
| |
|
