A lot can happen on a Wrapsite, and some of it may be unwanted. The Audit Trail allows you to review what people have done on the Wrapsite, by maintaining a log of when people login, read data, and change things.
Most days, your Wrapsite happily chugs along and there’s nothing to do with it. But there are two main situations when you may want to know more about what people actually did on the Wrapsite:
To help you keep track of what has happened on your Wrapsite, ExcelWraps leaves an Audit Trail where you can review past events. It is easy to download this audit log and examine it in Excel.
Some common auditing functions are best performed using MyWraps reports. As an example, if you want to see a list of all wraps a user has signed off, follow these steps:
Don’t hesitate to contact client services if you need help to create a report.
You find the Audit Trail and its settings on the Wrapsite’s Administration dashboard. Note the separate settings that allow you to tailor the audit trail. These settings are documented at the end of this help page.
For analysis, you export the Audit Trail to a file.
The audit log contains a lot of information. Select a date range that is as narrow as possible to limit the size of the exported file. All audit log entries occur in the past.
You can reduce the size of the downloaded file also by fetching only the events that changed something in the system, or did not change anything.
Press the Download button to initiate the download.
The ZIP file with the audit trail has the read and write events in two separate folders. Only one of these folders may be present, depending on what you chose to download.
Inside each of these folders, there is a folder with the name of your wrapsite.
Inside the wrapsite folder, there is one folder per year of the selected date range.
Inside each yearly folder, there is one file per day.
After you have imported one of these day files into Excel, you can filter the list of events on Event Name, e.g. to only view the Logged in events.
The event data is tagged with XML to explain what you see:
The Event Filter Data column makes it easy to show only the log entries pertaining to a specific user.
If you have enabled IP Address logging in the Audit trail settings, each log entry contains the client’s IP address.
The details for each event in the audit trail are usually self-explanatory. Please contact client services if you need help decoding the Audit Trail.
This section describes a user interface for analyzing the audit trail in the ExcelWraps server that will be removed in June 2022. In the next version of the server, all analysis is performed by downloading the audit log as described above, and analyzing it in Excel.
You access the audit trail on your Wrapsite’s Administration > Audit Trail page.
The Apply button filters the events in the Audit Trail according to the various filter settings and updates the list of events.
You can show events within a specific timeframe. For the date, use the calendar to select the start and end dates or type the date directly. Several common date formats are supported, like dd/mm/yyyy or yyyy-mm-dd.
Type the time in hh:mm format. You can insert the current time by pressing the center button on the D-pad (joystick) icon to the right of the field. Select the hours or minutes with the right/left arrows, and use the up/down arrows to adjust the selected time component.
All times are expressed relative to the UTC (Greenwich meridian) timezone.
You can filter the list of events on the various categories of events:
Enter the user name to filter the list to show only the events related to one user.
You can shorten the list of events by viewing only the events that changed something in the system.
You can sort the events in the order of
The Category column contains the category for the event.
The Event column tells you what happened.
The Read Only column contains True for entries that did not modify data.
The User column contains the User name associated with the event.
The Client IP column contains the network address for the device the User was using when the event occurred.
The Timestamp column tells you when the event occurred. All times are expressed relative to the UTC (Greenwich meridian) timezone.
The Summary column briefly describes the event.
The Details link opens the event in a format more suitable for printing.
If you click on the Details link for an event, it opens in a format more suitable for printing.
The number of items per page is controlled by the Show parameter at the bottom of the list. If the number of items exceeds this setting, a page navigation control appears to the right of it, allowing you to navigate directly to the page you want.
We don’t have a user name until the user clicks on the link and sets a new password.
You can export the Audit Trail to a file.
The export operation creates a ZIP file that contains an XML file. Please note that the timestamps in the file are relative to UTC, as indicated by the time zone.
<?xml version="1.0" encoding="utf-8" standalone="yes"?> <!--Exported from Orchard--> <Orchard> <Recipe> <ExportUtc>2020-10-25T10:46:12.807143Z</ExportUtc> </Recipe> <AuditTrail> <ExportStartDate>2020-10-18T00:00:00Z</ExportStartDate> <ExportEndDate>2020-10-26T00:00:00Z</ExportEndDate> <Event Name="LogInFailed" FullName="Orchard.AuditTrail.Providers.Users.UserAuditTrailEventProvider.LogInFailed" Category="User" CreatedUtc="2020-10-24T09:47:29Z" EventFilterKey="user" EventFilterData="firstname.lastname@example.org"> <EventData> <UserName>email@example.com</UserName> </EventData> </Event> </AuditTrail> </Orchard>
You can control in detail what events to log in the Audit Trail using the settings at Administration dashboard > Settings > Audit Trail.
If you want the Audit Trail to include the IP address for the device that was used to create the event, tick the checkbox at the end of the list.