Audit Log Page

The Audit Log page lists platform audit events for your Riverbed IQ Ops tenant. Each row records who performed an operation, which service handled it, what kind of operation it was, which EntityClosed Things deployed in the customer environment that are needed to run the business, such as applications, devices, interfaces, and locations. was affected, and when the event occurred. Use the Audit Log to review activity for security, compliance, or troubleshooting.

Note: You need the Audit Reader role to open the Audit Log page. Administrators assign roles on the User Management page. For the role definition, see Riverbed Console Built-in Roles.

Open the audit log page

Navigate to the Audit Log page:

  1. Click System (the gear icon) at the bottom of the left menu.

  2. Open Audit Log.

Overview

The Audit Log page uses the common faceted search controls. Search text, selected facets, and the time range work together to narrow the audit events.

Audit log filters

Use the time range to restrict results by the event timestamp. The Audit Log page initially shows events from the previous day. You can select another preset period or define a custom range.

Typical facet categories include:

  • Operation: The operation that was performed (for example, create, read, update, or delete).

  • Service name: The name of the service that recorded the event.

  • User identity: The user account (for example, user name or email) associated with the event.

  • Entity name: The name of the entity that was affected.

Results table

The table shows one row per audit event. Sortable columns include Entity name, Service name, Operation, and Timestamp. User identity is shown for context and is not sortable.

Row details

Click a row to open a details panel with more information about that audit event when the service provides additional content.