Skip to main content

Audit

The Audit page (/admin/audit) shows the tamper evident journal of every change and refusal. It needs audit:read.

What the screen shows​

ElementContent
FiltersFrom, To, Actor, Action, Target type, Cluster, Outcome (All outcomes)
EventsWhen, actor, action, target, outcome; each event opens as Audit event #n
Chainthe page verifies the hash chain: Chain verified (n events) or Chain broken at #n

Typical tasks​

  1. Find who changed a configuration. Filter on the action and the cluster, open the event.
  2. Prove the integrity of the journal. Read the verdict of the chain at the top of the page.