The Audit History Data Insight

{"URL":["/aai/web/v2/insights/*/audithistory"],"heroDescriptionIdentifier":"ice_insight_audit_history_intro","customCards":[{"id":"ice_insight_audit_history_details","title":"Understanding the Audit History Data Insight","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/Data_Insights/Insights_Type_Audit_History.htm","languages":["en-us"]},{"id":"ice_insights_view_understanding_page","title":"Understanding the Data Insight Details Page","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/Data_Insights/Insights_Viewing.htm","languages":["en-us"]},{"id":"ice_insights_view_using_graphic","title":"Using the Data Insight Graphic","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/Data_Insights/Insights_Viewing.htm","languages":["en-us"]},{"id":"ice_insights_view_using_table","title":"Using the Data Insight Table","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/Data_Insights/Insights_Viewing.htm","languages":["en-us"]},{"id":"ice_using_filters","title":"Using Filters","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/_Common/CommonFunctions/CF_Filters_web_interface.htm","languages":["en-us"]},{"id":"ice_description_Working_w_Tables","title":"Working with Tables","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/_Common/CommonFunctions/CF_Working_with_Tables.htm","languages":["en-us"]},{"id":"ice_insights_view_actions","title":"Actions for a Data Insight","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/Data_Insights/Insights_Viewing.htm","languages":["en-us"]},{"id":"ice_insights_editing","title":"Editing a Data Insight","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/Data_Insights/Insights_Adding_Editing_Deleting.htm","languages":["en-us"]},{"id":"ice_insights_schedule_steps","title":"Defining a Data Insight Schedule","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/Data_Insights/Insights_Scheduling.htm","languages":["en-us"]},{"id":"ice_insights_sharing_steps","title":"Sharing a Data Insight","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/Data_Insights/Insights_Sharing.htm","languages":["en-us"]},{"id":"ice_insights_copying","title":"Save a Copy of a Data Insight","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/Data_Insights/Insights_Adding_Editing_Deleting.htm","languages":["en-us"]},{"id":"ice_insights_add_to_dashbd_steps","title":"Adding a Data Insight to Your Dashboard","type":"configure","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/Data_Insights/Insights_Add_to_Dashbd.htm","languages":["en-us"]},{"id":"ice_insights_downloading","title":"Downloading a CSV File from the Data Insight","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/Data_Insights/Insights_Print_Download_Email.htm","languages":["en-us"]},{"id":"ice_insights_printing","title":"Printing a PDF from Data Insight","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/Data_Insights/Insights_Print_Download_Email.htm","languages":["en-us"]},{"id":"ice_insights_emailing","title":"Emailing the Data Insight","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/Data_Insights/Insights_Print_Download_Email.htm","languages":["en-us"]},{"id":"ice_insights_understanding","title":"Understanding Data Insights","type":"customize","url":"https://docs.automic.com/documentation/webhelp/english/ALL/components/TERMA_DOCU/*.*/AAI%20Guides/Content/Data_Insights/Insights_Understanding.htm","languages":["en-us"]}]}
about the audit history data insight, about the audit history report

The Audit History data insight gathers all events that are tracked in the AAI database for each active scheduler. These can be events related to job and jobstream executions, or job or jobstream definitions, or system events. This topic describes the Audit History data insight, what it contains, and what filter and view options it offers.

Important!

This data insight can be used for AutoSys schedulers only.

For general information about how to work with an individual data insight, see Viewing and Using a Data Insight. For information about creating and maintaining data insights, see Adding, Editing, Copying, and Deleting Data Insights.

Purpose

about audit history data insight, about audit history report, purpose of audit history

The Audit History data insight is a tool to track what happened when and who did it. You need this kind of tracking in two situations:

  • Triage: When problems arise without an immediately identifiable cause, you can examine past events to get precise details about what happened at or shortly before the problem occurred.

    For example, suppose that you start having problems with a job run that started two days ago. Examining the Audit History can reveal that the job definition was updated just before then. Now you can investigate whether those changes are the cause of your current delays.

  • Compliance: Whether it is for company, customer, or governmental compliance, you can have a record to refer to when addressing inquiries about past activities.

    For example, you might get a call from your compliance department that they want a list of all jobs that were changed on a particular day to be able to match them to work orders or change tickets that were issued. You can quickly create an Audit History data insight for the changes to job definitions on the requested day and scheduler, and print it, download a CSV, or even attach the output to an email directly to the compliance team.

Benefits

benefits of using the audit history data insight, benefits of the audit history report

Whereas workload schedulers generally have some sort of audit reporting capabilities, AAI and its Audit History data insight offer the following advantages that are not easily matched by other systems:

  • You can include data from more than one scheduler in one view.

  • The AAI web interface presents the data in an easy to understand structure and format.

  • You can easily manipulate the data with filters, sorts, and the column configuration options on your screen and see the results in real time.

  • Because AAI and its databases are separate from your scheduler server, you can afford to keep many more years of audit history data ready at your fingertips, without compromising the performance of your workload schedulers.

Specific benefits for AutoSys users

In the case of AutoSys specifically, although it has its own audit history capabilities, the problem is that different kinds of events are tracked in three separate archive files, one each for events, machines, and audits. This leaves you having to piece the data together to get a complete picture. AAI brings all those activities into the same Audit History data insight, giving you a complete overview of archive events in one place with no extra effort on your part.

Using filters, you can focus on any number of event types, even if they span different files in the originating AutoSys workload scheduler.

On the Audit History data insight, each change has one line item on the Audit History data insight. This consolidated presentation makes it easier to identify what line items constitute a single change.

Best Practice: Schedule Daily Downloads

audit history best practice, audit history tips

Because the Audit History is a tool for tracking past events for reconstructing them for audit purposes—as the name indicates—it is good to schedule a CSV file to be produced and emailed to yourself and possibly also the appropriate departments daily.

Tips for success:

  • Audit history data is typically voluminous. Therefore schedule the emails at short and regular intervals so that the attachment does not clog your recipients' inboxes.

  • Use a clearly identifying subject and description, so that your recipients can set up their email program to automatically archive them to a specified folder.

Configuration Settings

The Audit History data insight offers configuration settings that support tracking and reporting for activity history. These include relevant data columns, on which you can filter the event data, and group-by options for the aggregations on the graphic. What you need to know specifically for the Audit History data insight is covered here in the following:

For instructions about where and how you can define these, see Adding, Editing, Copying, and Deleting Data Insights.

Available Columns

columns on audit history data insight, columns on audit history report

The following are the data columns that are available in an Audit History data insight. You can define filters based on the data in these columns and you can choose to show or hide them in the table. The ones marked with an asterisk (*) are required columns and cannot be hidden. They contain key data or data that is essential to the purpose of an Audit History data insight.

  • Type*: The event type that occurred. The following are the filter options for event types that can be collected for the audit history:

    • Calendar Definition: Any changes related to a calendar definition

    • Connection Profile Definition: Any changes related to the connection profile

    • Job Definition: Any changes related to a job definition

    • Machine Definition: Any changes related to the machine definition

    • Monitor/Browser Definition: Any changes related to monitoring or browser definition

    • Override Definition: Any changes related to a one-time override

    • autosys_secure command: Occurrences of this kind of event

    • autotrack command: Occurrences of this kind of event

    • sendevent command: Occurrences of this kind of event

  • ID: The internal ID of the event. The sequential ID number tells you precisely the order of events.

  • Time*: The time that the event occurred, in the time zone that is defined for this data insight.

  • User*: The user whose actions triggered the event.

  • Name: The name of the object that was touched, if applicable.

  • Scheduler*: The AAI scheduler name for the workload scheduler on which the event occurred

  • Value: Details about the type of event, such as the full command for a sendEvent or autoTrack command event

Note:

You can sort the table on any of the columns except the Value column. This is due to the complexity of the data that the column can contain. To surface events related to a specific action, command type, or other value, add a filter on the Value column that will select them.

Group-By Options

group-by options for audit history

With the Group By setting of the Audit History data insight, you can choose what is summarized to make up the slices in the pie chart. Whereas the whole pie chart represents the total of all events that match the filter criteria, each slice shows the proportion of those events that belong to the each value in the Group By column value.

The following are the columns that you can choose for the Group By setting on the Audit History data insight:

  • Scheduler (default)

  • Type

You can define the default Group By option in the Filters settings of the data insight, or you can change it from the Group By field while viewing the data insight.