VaultOne: Use Filters on the Audit Screen

Log auditing is a critical tool for tracking and analyzing activities in your account. It allows you to monitor user actions, services used, and important security details. To make it easier to find the information you need, our platform offers filters that help you quickly locate and analyze your data.

Accessing the Audit Logs

1. Click on the Administration menu and then click Audit logs.
2. On this screen, you will see a list of the latest actions performed by users in your vault.
3. To access more specific search options, click Show advanced filters.

Using Filters

When auditing logs, you have two primary ways to apply filters to find the information you need:

1. Filter by a period of up to 31 days: You can select a date range of up to 31 days at a time without needing to apply any additional filters. This allows you to view all activity within the selected period. If you try to select a period longer than 31 days, you will receive an error message.
2. Filter by up to 92 days using additional criteria: If you use one or more of the following advanced filters—email, service, or action—you can select a larger date range of up to 92 days. You can use these filters individually or in combination to further refine your search. If the period is longer than 92 days, an error message will appear.

Below is a list of auditable actions for each menu:

Credentials

• View Credential: GetCredentialSecret
• Edited a credential: EditCredential
• Deleted a credential: DeleteCredential

Cloud Services

• Viewed the details of a service: GetCloudServiceDetail
• Made a connection to a service: ConfirmConnection

Computers

• Viewed the details of a computer: GetServerDetail
• Viewed the credential linked to that computer: GetCredentialSecret
• Made the connection on a computer: ConfirmConnection

Website

• Viewed the details of a website: GetWebsiteDetail
• Viewed the credential linked to that website: GetCredentialSecret
• Connected to a website: ConfirmConnection