The Audit Log report provides a filtered view of audit log entries, as found on the Audit Log page (Settings | Audit Logs). Available report filters include time range, user associated with the activity, and/or keyword criteria.
Note: As discussed in About Audit Logs, the duration of time for which audit log entries remain available is determined by the “alert history storage” level associated with your LogicMonitor package. To save these records (or a filtered subset) indefinitely for historical purposes, you can schedule recurring Audit Log reports.
Configuring an Audit Log Report
To configure an Audit Log report, select Reports | Add | Report | Audit Log Report. A report dialog appears that allows you to configure various report settings.
Configuring Settings Common to All Report Types
The first four settings that are found in the report dialog (Title, Description, Group, and Format), along with the final setting (Generate this report on a schedule), are universal to all report types. To learn more about these global report settings, see Creating and Managing Reports.
Configuring Audit Log Report Settings
In the Audit Log Report Settings area of the report configuration dialog, shown and discussed next, specify settings particular to the Audit Log report including activity time range and activity filters (e.g. user, IP address, etc.).
In this field, indicate the duration of time for which data will be pulled for this report.
Filter the scope of your Audit Log report by entering filter criteria into the Search Filter field. Boolean logic (e.g. wildcards, operators) is permissible in this field. The search functionality available here is identical to that found on the Audit Logs page. See About Audit Logs for more details.
Use the User Filter field to limit report output to one or more users.
Use the Sorted By field’s dropdown menu to sort based on user or activity date.
Uncheck any columns that you would like to exclude from the report. To reorder columns, grab the icon to the far left of a column name and drag and drop the column into its new position.