Audit logs are the activity trail of SESTEK AgenticCX. Every request made to the platform is recorded with the user who made it, the IP address it came from, the URL, the time, how long it took and how it ended. Use them to answer questions such as who changed a queue, which request failed, or what a user did during a given hour.
Open them from Administration, Audit logs in the left menu. The page has two tabs, Audit logs and Entity changes.
Watch the walkthrough
What you can do on this page
| Action | What it does | Permission needed |
|---|---|---|
| Browse, filter and open audit logs | Find a request and see its full detail | Audit logs, in the Audit logging group of the role permissions |
| Export to Excel | Download the matching logs as a spreadsheet | Export audit logs, in the same group |
The permissions are granted per role under Administration, Identity management, Roles. Because the logs contain user names, IP addresses and request parameters, give them only to the people who need to audit the system.
The audit log list
Each row is one request. Select a column heading with a sort arrow to sort by it.
| Column | What it shows |
|---|---|
| Actions | The Detail button, which opens the full record |
| HTTP Request | The HTTP status code and method as colored badges, then the URL |
| User | The signed-in user. It is empty for a request made before sign-in, such as a login |
| IP Address | The client IP address the request came from |
| Date | When the request was made, in your tenant's time zone and format |
| Duration | How long the request took to handle |
| Application Name | The application that handled it, for example the main API host or the authentication server |
The list shows ten requests per page. The total and the page numbers are at the bottom.
Filter the audit logs
Fill in any combination of fields, then select Refresh to apply them.
| Field | What it does |
|---|---|
| Start date, End date | Limit the time window. The date pickers also take an hour and a minute |
| User name | Requests made by one user |
| URL | Requests whose URL contains the text you type |
| Min. duration, Max. duration | Keep only slow or fast requests |
| HTTP method | GET, POST, PUT, DELETE and the other HTTP methods |
| HTTP status code | One status code, for example 500 - Internal server error |
| Application name | Requests handled by one application |
| Client IP Address | Requests from one address |
| Correlation Id | Requests that share one correlation ID |
| Has exception | Limit the list to requests that raised an exception |
For example, to see who changed queues, set URL to queue and HTTP method to PUT.
To investigate a problem, choose a status code such as 500 - Internal server error.
Open a request
Select Detail on a row. The dialog has an Overall tab and an Actions tab.
The Overall tab lists:
| Field | Meaning |
|---|---|
| HTTP status code, HTTP method, URL | What was requested and the result |
| Client IP Address, Client Name | Where it came from |
| Exceptions | The error that was returned, if the request failed |
| User name | Who made the request |
| User Impersonator | Shown when the request was made while impersonating a user, with the impersonator's name and ID |
| Time, Duration | When it happened and how long it took |
| Browser Info | The browser of the client |
| Application name, Correlation Id | The handling application and the correlation ID |
| Comments, Extra properties | Additional notes and properties, when present |
For a failed request, the Exceptions row holds the error.
The Actions tab, which shows the number of actions in brackets, lists which service method ran, how long it took, and the Parameters it received. This is the quickest way to see exactly what a change request contained.
Entity changes
The Entity changes tab lists changes recorded at the data level.
You can filter by Time, Change type (Created, Updated or Deleted), Entity Id and Entity Type Full Name. The columns are Detail, Time, Change type, Tenant ID, Entity ID and Entity type full name. When nothing matches, the list says No data available.
Export to Excel
Select Export to Excel to download the logs that match your current filters as a spreadsheet named AuditLogs followed by the date and time. The Entity changes tab has its own Export to Excel button. Set your filters first, so the file holds only what you need.
Good to know
- Audit logs are read only. You can search and export them, but not edit or delete them.
- A few requests are deliberately not recorded, for example the contact CSV import.
- Dates and times follow your tenant's time zone and date format, set under Settings, Localization.
- The URL filter matches part of the address, so a short word such as
queuefinds every queue request.