Using the Audit Log
The Audit Log tracks all user activities within the Eleveo applications (Quality Management, as well as User Management) for enhanced security and compliance purposes. By default, viewing and using the Audit Log is only available to users with the CC Manager or Compliance Analyst roles.
-
From the left menu, select Administration > Audit Log. The Audit Log screen will display recent events.
-
Active filters will be displayed.
-
Click the Reset Filters icon beside a filtering option in order to clear each of the filters individually or click on the Remove Filters icon to clear all filters.
-
You may filter results by Time Period, Activity, User or Result. Click Apply to apply the selected filters. By default, events from the past 10 days are displayed.
-
The search will refresh every time the filters are changed. You can also click on the Refresh button to force refresh the results.
-
Hover over the info icon to view details of the user who performed an audited action.
-
Hover over the info icon to view the full description of the audited action (useful for longer or more detailed descriptions).
The Audit Log messages are not localized, however, the names of some items (such as the name of tabs, or other items displayed in the Web UI) are displayed in the log in the language of the audited user.
Information Displayed
The Audit Log displays the following:
-
Date: The timestamp indicates the date and time when the auditable activity occurred. The time displayed in the log corresponds to the timezone of the current user. Not necessarily the server timezone.
-
Activity: Indicates the activity that triggered the creation of the log entry. Actions displayed in this list range from; when a user logs into the application, to the creation of an evaluation, to the deletion of a call. A more complete list of activities is provided in the section below.
-
User: Displays the full name of the user who triggered the auditable action.*
-
Username: Displays the username of the user who triggered the auditable action. (The username is the same as that used on the login screen.)*
-
Description: Provides a more fine-grained detail of the activity that was logged. Usually, the details include the ID of the user who performed the action, but the actual details depend on the type of activity. The description field only displays what is provided by the backend in the JSON file, in some cases only a user ID is displayed. If it is necessary to determine which user matches a particular ID, then it is necessary to access the database directly. For example, to determine a user related to a conversation search go to the Encourage database, and examine the Table of Users.
-
Result: Status message of the Requests and Responses (see below for a detailed explanation). Each completed action is listed in the log with an indication of success (OK), failure (FAIL) or lack of permission (UNAUTHORIZED).
*Events related to users/groups import from external sources (using user importers) do not contain the User and Username information.
QM Events
The QM activities that trigger the creation of the log entry can be divided into two groups: synchronous and asynchronous.
Asynchronous Events
All actions triggered from within the Conversation Explorer and Administrative screens in Quality Management (Compliance, Audit, Data Lifecycle, UI configuration, Tags) trigger the creation of multiple records in the Audit Log list. Each received request is listed in the log without a status message. Each completed action is listed in the log with an indication of success (OK), failure (FAIL) or lack of permission (UNAUTHORIZED).
For instance, pressing the Search button on Conversation Explorer leads to the creation of two log entries, one for each action:
-
request search (begins),
-
request search (ends).
Note the lower log message indicates that a user performed a search of conversations (no result is displayed as this is only the start of the request). The other row indicates the successful completion of the request. Success here is indicated by the "OK" status in the Result column.
Administrators can compare the timestamp of the request received and the request completion. Long delays between the two may be indicative of connectivity-related issues.
Synchronous Events
Activities triggered on other screens with Quality Management lead to the creation of a single mention in the log with an indication of success (OK), failure (FAIL) or lack of permission (UNAUTHORIZED).
The Full List of Events
Click to expand...
The table below contains all activities that trigger the creation of the log entry, as well as an indication if they are synchronous or asynchronous.
|
Module |
Activity |
Description |
Asynchronous |
Synchronous |
|---|---|---|---|---|
|
Conversation Explorer |
CONVERSATION_EVENT_ANONYMIZE_ADD |
Anonymization of the conversation |
x |
|
|
|
CONVERSATION_BY_ID |
Interaction lookup by ID |
x |
|
|
|
CONVERSATION_EVENT_CHAT_CHANGE |
Chat updated |
x |
|
|
|
CONVERSATION_CLIENT_SEARCH |
Interaction(s) searched for |
x |
|
|
|
CONVERSATION_EVENT_EMAIL_CHANGE |
Email updated |
x |
|
|
|
EXPORT_EXECUTE |
Interaction metadata exported |
x |
|
|
|
CONVERSATION_EVENT_METADATA_CHANGE |
Metadata updated |
x |
|
|
|
CONVERSATION_EVENT_REVIEW_ADD |
Review added |
x |
|
|
|
CONVERSATION_EVENT_REVIEW_CHANGE |
Review changed |
x |
|
|
|
CONVERSATION_SEARCH |
Interaction(s) searched for |
x |
|
|
|
CONVERSATION_EVENT_SURVEY_ADD |
Survey added |
x |
|
|
|
CONVERSATION_EVENT_SURVEY_CHANGE |
Survey changed |
x |
|
|
|
CONVERSATION_EVENT_TAG_ADD |
Interaction tag added |
x |
|
|
|
CONVERSATION_EVENT_TAG_REMOVE |
Interaction tag removed |
x |
|
|
|
CONVERSATION_EVENT_TAG_UPDATE |
Interaction tag updated |
x |
|
|
Automated Quality Management |
AUTOMATED_RULE_CREATED |
Rule created |
x |
|
|
|
AUTOMATED_RULE_MODIFIED |
Rule updated |
x |
|
|
|
AUTOMATED_RULE_DELETED |
Draft rule deleted |
x |
|
|
Administration |
AUDIT_SEARCH |
Audit page search used |
x |
|
|
|
FIELD_CONFIG_LIST |
Configuration field list showed |
x |
|
|
|
FIELD_CONFIG_UPDATE |
Configuration field updated |
x |
|
|
|
LABEL_CREATE |
User label created |
x |
|
|
|
LABEL_DELETE |
User label deleted |
x |
|
|
|
LABEL_UPDATE |
User label updated |
x |
|
|
|
METADATA_KEY_UPDATE |
Metadata key for search updated |
x |
|
|
|
PASSWORD_CREATE |
Password created |
x |
|
|
|
SEARCH_TEMPLATE_UPDATE |
Search template updated |
x |
|
|
|
SAVED_FILTER_SEARCH |
Saved Filters searched by name, or displayed |
x |
|
|
|
SAVED_FILTER_ASSIGNMENT_MODIFIED |
Assignment of users to a saved filter modified |
x |
|
|
|
USER_LIST |
User list displayed |
x |
|
|
|
EDIT_AUDIT_REASON |
Replace reason changed |
x |
|
|
|
MERGE_AUDIT_REASON |
Replace reason merged |
x |
|
|
|
FIELD_CONFIG_LIST |
Configuration field list showed |
x |
|
|
|
FIELD_CONFIG_UPDATE |
Configuration field updated |
x |
|
|
|
METADATA_KEY_UPDATE |
Metadata key for search updated |
x |
|
|
|
EDIT_OPTIONS |
Preferences are updated |
|
x |
|
Reviews |
REVIEWS_GET |
Review retrieved |
|
x |
|
|
REVIEWS_CREATE |
Review created |
|
x |
|
|
REVIEWS_UPDATE |
Review updated |
|
x |
|
|
REVIEWS_DELETE |
Review deleted |
|
x |
|
|
REVIEWS_FEEDBACK |
Retrieved the feedback history |
|
x |
|
|
FEEDBACK_EXPORT |
Review feedback history exported to an XLSX |
|
x |
|
|
FEEDBACK_SENT |
Sends an email with feedback to agent |
|
x |
|
|
OVERVIEW_EXPORT |
Overview exported as an XLSX |
|
x |
|
|
OVERVIEW_GET |
Review overview retrieved |
|
x |
|
|
REVIEW_EXPORT |
Review exported to XLSX |
|
x |
|
|
PLANS_GET |
Plans retrieved |
|
x |
|
|
PLANS_CREATE |
Plan created |
|
x |
|
|
PLANS_UPDATE |
Plan updated |
|
x |
|
|
PLANS_DELETE |
Plan deleted |
|
x |
|
|
REASONS_GET |
Reasons retrieved |
|
x |
|
|
REASONS_CREATE |
Reason created |
|
x |
|
|
REASONS_UPDATE |
Reason updated |
|
x |
|
|
REASONS_DELETE |
Reason deleted |
|
x |
|
|
REASONS_MERGE |
Reasons merged |
|
x |
|
|
GRADINGS_GET |
Grading details retrieved |
|
x |
|
|
GRADINGS_UPDATE |
Grading updated |
|
x |
|
|
GRADINGS_CREATE |
Grading created |
|
x |
|
|
GRADINGS_REPLACE |
Grading replaced with new one |
|
x |
|
|
CATEGORIES_GET |
Categories retrieved |
|
x |
|
|
CATEGORIES_CREATE |
Category created |
|
x |
|
|
CATEGORIES_UPDATE |
Category updated |
|
x |
|
|
CATEGORIES_DELETE |
Category deleted |
|
x |
|
Questionnaires |
QUESTIONNAIRES_GET |
Questionnaires listed or retrieved by ID |
|
x |
|
|
QUESTIONNAIRES_CREATE |
Questionnaire created |
|
x |
|
|
QUESTIONNAIRES_UPDATE |
Questionnaire edited |
|
x |
|
|
QUESTIONNAIRES_IMPORT |
Questionnaire imported |
|
x |
|
|
QUESTIONNAIRES_EXPORT |
Questionnaire exported |
|
x |
|
|
SCORING_TIER_CREATE |
Scoring Tier created |
|
x |
|
|
SCORING_TIER_UPDATE |
Scoring Tier updated |
|
x |
|
|
SCORING_TIER_DELETE |
Scoring Tiers removed |
|
x |
|
|
MEDIA_FILE_GET |
Retrieved the content of a media file |
|
x |
|
|
MEDIA_FILE_CREATE |
Media file created |
|
x |
|
|
MEDIA_FILE_UPDATE |
Media file updated |
|
x |
|
|
MEDIA_FILE_DELETE |
Media file deleted |
|
x |
|
|
MEDIA_FILE_GET_IVR |
Retrieved media file for IVR playback |
|
x |
|
|
QUESTIONNAIRES_GET_IVR |
Questionnaire retrieved by ID |
|
x |
|
Surveys |
SURVEYS_CREATE_IVR |
Survey created based on IVR data |
|
x |
|
|
SURVEYS_GET |
Survey(s) retrieved |
|
x |
|
|
SURVEYS_UPDATE |
Survey updated |
|
x |
|
|
SURVEYS_DELETE |
Survey deleted |
|
x |
|
|
SURVEYS_EXPORT |
Survey exported to XLSX |
|
x |
|
Training |
TRAINING_GET |
Trainings searched for |
|
x |
|
|
TRAINING_CREATE |
Training created |
|
x |
|
|
TRAINING_UPDATE |
Training updated |
|
x |
|
|
TRAINING_DELETE |
Training deleted |
|
x |
|
|
TRAINING_EXPORT |
Training exported to XLSX |
|
x |
|
|
TRAINING_PERFORM |
Training performed |
|
x |
|
|
TRAINING_REPORT |
Training reported |
|
x |
|
|
TRAINING_SEARCH |
Training(s) searched for |
|
x |
|
Speech Recognition |
ADD_SPEECH_TAG |
Speech tag added |
|
x |
|
|
EDIT_SPEECH_TAG |
Speech tag edited |
|
x |
|
|
REMOVE_SPEECH_TAG |
Speech tag deleted |
|
x |
|
Data Export |
DATA_EXPORT_CREATE |
Data Export Created |
|
x |
|
|
DATA_EXPORT_DELETE |
Data Export Deleted |
|
x |
|
|
DATA_EXPORT_CHANGED |
Data Export Updated |
|
x |
|
|
DATA_EXPORT_DOWNLOAD |
Output file downloaded |
|
x |
|
|
DATA_EXPORT_EMAILED |
Output file emailed |
|
x |
|
|
DATA_EXPORT_RUN_MANUAL |
Task Execution Manual |
|
x |
|
|
DATA_EXPORT_RUN_SCHEDULED |
Data Export scheduled execution |
|
x |
|
Misc |
TAB_CLOSED |
Tab is closed |
|
x |
|
|
TAB_OPENED |
Tab is opened |
|
x |
|
|
TAB_FOCUSED |
Tab is focused |
|
x |
|
|
ACCESS_MEDIA |
Media accessed |
|
x |
|
|
ADD_GROUP |
Group added |
|
x |
|
|
DELETE_CALL* |
Call deleted |
|
x |
|
|
REMOVE_INTERACTION_TYPE |
Interaction type removed |
|
x |
|
|
REMOVE_GROUP |
Group removed |
|
x |
|
|
SEND_FEEDBACK |
Agent feedback sent |
|
x |
|
|
SEND_RECORDING |
Recording sent |
|
x |
|
|
SYNCHRONIZE_NOW |
Remote user synchronization forced |
|
x |
|
|
INCLUDE_IN_REPORTS_CHANGED |
Include in reports review status changed |
|
x |
|
|
EDIT_AUDIT_REASON |
Replace reason changed |
|
x |
|
|
EDIT_USER |
User edited |
|
x |
|
|
MERGE_AUDIT_REASON |
Replace reason merged |
|
x |
|
|
USER_LOGIN |
User login |
|
x |
|
|
USER_LOGOUT |
User logged out |
|
x |
|
|
USER_PROFILE_CHANGE_DELEGATE |
User profile delegation changed |
|
x |
*This event is triggered when a subevaluation is deleted (not when a call/conversation is deleted).
UM Events
Actions triggered from within User Management represent all access-related activities performed by users (for example: login, logout, requesting a token etc.).
Click to expand...
The following list is representative of the Login Events in User Management:
|
Module |
Activity |
Description |
Asynchronous |
Synchronous |
|
Custom Activities |
ACTION_PUSHER_SYNC |
Synchronization with pusher triggered |
|
x |
|
|
CREATE_CUSTOM_ROLE |
Custom role created |
|
x |
|
|
CREATE_CUSTOM_ROLE_MAPPING |
Role mapping to custom role created |
|
x |
|
|
CREATE_LICENSE |
License file imported to user management |
|
x |
|
|
CREATE_PROVIDER_CLIENT |
Provider client created |
|
x |
|
|
CREATE_SUPERVISOR_MEMBERSHIP |
Supervisor membership created |
|
x |
|
|
DELETE_CUSTOM_ROLE |
Custom role deleted |
|
x |
|
|
DELETE_CUSTOM_ROLE_MAPPING |
Role mapping to custom role deleted |
|
x |
|
|
DELETE_EVENTS |
Events deleted |
|
x |
|
|
DELETE_IMPORTED_USERS |
Imported users deleted |
|
x |
|
|
DELETE_PROVIDER_CLIENT |
Provider client deleted |
|
x |
|
|
DELETE_SUPERVISOR_MEMBERSHIP |
Supervisor membership deleted |
|
x |
|
|
UPDATE_CUSTOM_ROLE |
Custom role updated |
|
x |
|
|
UPDATE_REALM_SETTINGS |
Realm settings updated |
|
x |
|
|
UPDATE_SUPERVISOR_MEMBERSHIP |
Supervisor membership updated |
|
x |
|
|
UPDATE_USER_EXTENSION |
User extension updated |
|
x |
|
Build-in Activities |
AUTHREQID_TO_TOKEN |
Client initiated backchannel authentication (CIBA) token granted |
|
x |
|
|
AUTHREQID_TO_TOKEN_ERROR |
Error on granting CIBA token |
|
x |
|
|
CLIENT_DELETE |
Client deleted |
|
x |
|
|
CLIENT_DELETE_ERROR |
Error on client deletion |
|
x |
|
|
CLIENT_INFO |
Client info obtained during client registration |
|
x |
|
|
CLIENT_INFO_ERROR |
Error on getting client info |
|
x |
|
|
CLIENT_INITIATED_ACCOUNT_LINKING |
User account linked with external identity provider using specific client |
|
x |
|
|
CLIENT_INITIATED_ACCOUNT_LINKING_ERROR |
Error on client initiated account linking |
|
x |
|
|
CLIENT_LOGIN |
Client logged in |
|
x |
|
|
CLIENT_LOGIN_ERROR |
Error on client login |
|
x |
|
|
CLIENT_REGISTER |
Client registered |
|
x |
|
|
CLIENT_REGISTER_ERROR |
Error on client registration |
|
x |
|
|
CLIENT_UPDATE |
Client updated |
|
x |
|
|
CLIENT_UPDATE_ERROR |
Error on client update |
|
x |
|
|
CODE_TO_TOKEN |
Authorization code exchanged for a token |
|
x |
|
|
CODE_TO_TOKEN_ERROR |
Error on exchanging authorization code for a token |
|
x |
|
|
CUSTOM_REQUIRED_ACTION |
Custom required action triggered |
|
x |
|
|
CUSTOM_REQUIRED_ACTION_ERROR |
Error on custom required action |
|
x |
|
|
DELETE_ACCOUNT |
User deleted its account via manage acount console |
|
x |
|
|
DELETE_ACCOUNT_ERROR |
Error on account deletion |
|
x |
|
|
EXECUTE_ACTIONS |
Action executed |
|
x |
|
|
EXECUTE_ACTIONS_ERROR |
Error on executing action |
|
x |
|
|
EXECUTE_ACTION_TOKEN |
Token permitting specific action executed |
|
x |
|
|
EXECUTE_ACTION_TOKEN_ERROR |
Error on action token execution |
|
x |
|
|
FEDERATED_IDENTITY_LINK |
User account linked with federated identity provider |
|
x |
|
|
FEDERATED_IDENTITY_LINK_ERROR |
Error on federated identity link |
|
x |
|
|
GRANT_CONSENT |
Consent granted |
|
x |
|
|
GRANT_CONSENT_ERROR |
Error on consent grant |
|
x |
|
|
IDENTITY_PROVIDER_FIRST_LOGIN |
Login with identity provider triggered for the first time |
|
x |
|
|
IDENTITY_PROVIDER_FIRST_LOGIN_ERROR |
Error on identity provider first login |
|
x |
|
|
IDENTITY_PROVIDER_LINK_ACCOUNT |
Identity provider account linked |
|
x |
|
|
IDENTITY_PROVIDER_LINK_ACCOUNT_ERROR |
Error on identity provider link account |
|
x |
|
|
IDENTITY_PROVIDER_LOGIN |
Identity provider used to log in |
|
x |
|
|
IDENTITY_PROVIDER_LOGIN_ERROR |
Error on identity provider login |
|
x |
|
|
IDENTITY_PROVIDER_POST_LOGIN |
Identity provider post login action triggered |
|
x |
|
|
IDENTITY_PROVIDER_POST_LOGIN_ERROR |
Error on identity provider post login |
|
x |
|
|
IDENTITY_PROVIDER_RESPONSE |
Identity provider responded |
|
x |
|
|
IDENTITY_PROVIDER_RESPONSE_ERROR |
Identity provider response error |
|
x |
|
|
IDENTITY_PROVIDER_RETRIEVE_TOKEN |
Identity provider token retrieved |
|
x |
|
|
IDENTITY_PROVIDER_RETRIEVE_TOKEN_ERROR |
Error on identity provider retrieve token |
|
x |
|
|
IMPERSONATE |
Logged user is switched/impersonated to other user |
|
x |
|
|
IMPERSONATE_ERROR |
Error on user impersonation |
|
x |
|
|
INTROSPECT_TOKEN |
Token introspected |
|
x |
|
|
INTROSPECT_TOKEN_ERROR |
Error on introspect token |
|
x |
|
|
INVALID_SIGNATURE |
Invalid certificate signature |
|
x |
|
|
INVALID_SIGNATURE_ERROR |
Invalid signature error |
|
x |
|
|
LOGIN |
User logged in |
|
x |
|
|
LOGIN_ERROR |
Error on user login |
|
x |
|
|
LOGOUT |
User logged out |
|
x |
|
|
LOGOUT_ERROR |
Error on user logout |
|
x |
|
|
OAUTH2_DEVICE_AUTH |
Device authorization |
|
x |
|
|
OAUTH2_DEVICE_AUTH_ERROR |
Error on device authorization |
|
x |
|
|
OAUTH2_DEVICE_CODE_TO_TOKEN |
Device authorization code for token |
|
x |
|
|
OAUTH2_DEVICE_CODE_TO_TOKEN_ERROR |
Error on exchanging device authorization code for token |
|
x |
|
|
OAUTH2_DEVICE_VERIFY_USER_CODE |
Device user code verified |
|
x |
|
|
OAUTH2_DEVICE_VERIFY_USER_CODE_ERROR |
Error on user code verification |
|
x |
|
|
PERMISSION_TOKEN |
User management access (UMA) token grant type requested |
|
x |
|
|
PERMISSION_TOKEN_ERROR |
Error on UMA token grant request |
|
x |
|
|
PUSHED_AUTHORIZATION_REQUEST |
Authorization request pushed |
|
x |
|
|
PUSHED_AUTHORIZATION_REQUEST_ERROR |
Error on pushing authorization request |
|
x |
|
|
REGISTER |
User registered |
|
x |
|
|
REGISTER_ERROR |
Error on user register |
|
x |
|
|
REGISTER_NODE |
New client cluster node registered |
|
x |
|
|
REGISTER_NODE_ERROR |
Error on registering client cluster node |
|
x |
|
|
REMOVE_FEDERATED_IDENTITY |
Federated identity removed |
|
x |
|
|
REMOVE_FEDERATED_IDENTITY_ERROR |
Error on removing federated identity |
|
x |
|
|
REMOVE_TOTP |
Time-based one-time password removed |
|
x |
|
|
REMOVE_TOTP_ERROR |
Error on remove time-based one-time password |
|
x |
|
|
RESET_PASSWORD |
Password reset |
|
x |
|
|
RESET_PASSWORD_ERROR |
Error on password reset |
|
x |
|
|
RESTART_AUTHENTICATION |
Authentication restarted |
|
x |
|
|
RESTART_AUTHENTICATION_ERROR |
Error on authentication restart |
|
x |
|
|
REVOKE_GRANT |
Token grant revoked |
|
x |
|
|
REVOKE_GRANT_ERROR |
Error on token revoke grant |
|
x |
|
|
SEND_IDENTITY_PROVIDER_LINK |
Identity provider link sent |
|
x |
|
|
SEND_IDENTITY_PROVIDER_LINK_ERROR |
Error on sending identity provider link |
|
x |
|
|
SEND_RESET_PASSWORD |
Reset password sent |
|
x |
|
|
SEND_RESET_PASSWORD_ERROR |
Error on sending reset password |
|
x |
|
|
SEND_VERIFY_EMAIL |
Verify email sent |
|
x |
|
|
SEND_VERIFY_EMAIL_ERROR |
Error on sending verify email |
|
x |
|
|
TOKEN_EXCHANGE |
Token exchanged |
|
x |
|
|
TOKEN_EXCHANGE_ERROR |
Error on token exchange |
|
x |
|
|
UNREGISTER_NODE |
Client cluster node unregistered |
|
x |
|
|
UNREGISTER_NODE_ERROR |
Error on client cluster node unregistration |
|
x |
|
|
UPDATE_CONSENT |
User consent updated |
|
x |
|
|
UPDATE_CONSENT_ERROR |
Error on user consent update |
|
x |
|
|
UPDATE_EMAIL |
Email updated |
|
x |
|
|
UPDATE_EMAIL_ERROR |
Error on update email |
|
x |
|
|
UPDATE_PASSWORD |
Password updated |
|
x |
|
|
UPDATE_PASSWORD_ERROR |
Error on update password |
|
x |
|
|
UPDATE_PROFILE |
Profile updated |
|
x |
|
|
UPDATE_PROFILE_ERROR |
Error on update profile |
|
x |
|
|
UPDATE_TOTP |
Time-based one-time password updated |
|
x |
|
|
UPDATE_TOTP_ERROR |
Error on update time-based one-time password |
|
x |
|
|
VALIDATE_ACCESS_TOKEN |
Access token validated |
|
x |
|
|
VALIDATE_ACCESS_TOKEN_ERROR |
Error on validating access token |
|
x |
|
|
VERIFY_EMAIL |
Email verified |
|
x |
|
|
VERIFY_EMAIL_ERROR |
Error on verify email |
|
x |
|
|
VERIFY_PROFILE |
Profile verified |
|
x |
|
|
VERIFY_PROFILE_ERROR |
Error on verifying profile |
|
x |