Audit trail codes Portal (classic)

The audit trail codes on this page apply to Portal, Nexthink Experience.

Refer to the Audit trail codes Infinity documentation for audit trail codes that apply to Nexthink Infinity.

Refer to the Exporting audit logs to learn how to query audit trail codes.

Code	Description
20001	Portal is starting [Portal|SYSTEM|20001|*system] Portal is starting
20002	Portal is up and running [Portal|SYSTEM|20002|*system] Portal is up and running
20004	Portal is stopped [Portal|SYSTEM|20004|*system] Portal is stopped
20101	User logged in [Portal|LOGIN|20101|account] User account logged with session id session id
20102	User logged out [Portal|LOGIN|20102|account] User account logout for session id session id
20103	User login failed [Portal|LOGIN|20103|*system] User account failed login attempts - reason
20104	User locked [Portal|LOGIN|20104|account] User account is locked
20201	User created [Portal|USER|20201|account] User created account is created
20202	User removed [Portal|USER|20202|account] User deleted account is removed
20203	User updated [Portal|USER|20203|account] User updated account is created
20204	User profile updated [Portal|USER|20204|account] Updated profile of n users
20205	User domain ownership updated [Portal|USER|20204|account] Updated account ownership of n users
20206	Role added [Portal|USER|20206|account] Role name is added
20207	Role updated [Portal|USER|20207|account] Role name is updated
20208	Role removed [Portal|USER|20208|account] Role name is removed
20209	Profile added (with roles) [Portal|USER|20209|account] Added profile name roles: roles names
20210	Profile updated (with roles) [Portal|USER|20210|account] Updated profile name roles: roles names
20211	Profile removed [Portal|USER|20211|account] Removed profile name
20501	Hierarchy added [Portal|HIERARCHY|20501|account] Hierarchy name is added
20502	Hierarchy removed [Portal|HIERARCHY|20502|account] Hierarchy name is removed
20503	Hierarchy updated [Portal|HIERARCHY|20503|account] Hierarchy name is updated
20504	Definition of entities updated [Portal|HIERARCHY|20504|account] CSV of entities category is updated
20505	Collector assignment updated [Portal|HIERARCHY|20505|account] Collector Assignment entities category is updated
20701	Engine added [Portal|ENGINE|20701|account] Engine name of IP IP address or DNS name Port port number is added
20702	Engine removed [Portal|ENGINE|20702|account] Engine name of IP IP address or DNS name Port port number is removed
20703	Engine connected [Portal|ENGINE|20703|account] Engine name of IP IP address or DNS name Port port number is connected
20704	Engine disconnected [Portal|ENGINE|20704|account] Engine name of IP IP address or DNS name Port port number is disconnected
20801	Finder user logged in [Portal|FINDER|20801|account] User account logged in (finder)
20803	Finder user login failed [Portal|FINDER|20801|account] User account login failed
20804	Library pack import request (only issued for big packs) [Portal|FINDER|20804|account] Finder import req uid=pack uid
20901	Remote action updated [Portal|CONTENTMANAGER|20901|account] Updated remote action in content manager, uid=remote action uid, name=remote action name
20902	Remote action created [Portal|CONTENTMANAGER|20902|account] Created remote action in content manager, uid=remote action uid, name=remote action name
20903	Remote action deleted [Portal|CONTENTMANAGER|20902|account] Deleted remote action in content manager, uid=remote action uid
20911	Metric updated [Portal|CONTENTMANAGER|20911|account] Updated metric in content manager, uid=metric uid, status=enabled|disabled
20912	Metric created [Portal|CONTENTMANAGER|20912|account] Created metric in content manager, uid=metric uid
20913	Metric deleted [Portal|CONTENTMANAGER|20913|account] Deleted metric in content manager, uid=metric uid
20921	Service updated [Portal|CONTENTMANAGER|20921|account] Updated service in content manager, uid=service uid, status=enabled|disabled
20922	Service created [Portal|CONTENTMANAGER|20922|account] Created service in content manager, uid=service uid
20923	Service deleted [Portal|CONTENTMANAGER|20923|account] Deleted service in content manager, uid=service uid
20931	Campaign updated [Portal|CONTENTMANAGER|20931|account] Updated campaign in content manager, uid=campaign uid, name=campaign name, status=draft|published|retired
20932	Campaign created [Portal|CONTENTMANAGER|20932|account] Created campaign in content manager, uid=campaign uid, name=campaign name
20933	Campaign deleted [Portal|CONTENTMANAGER|20933|account] Deleted campaign in content manager, uid=campaign uid
20941	Category updated [Portal|CONTENTMANAGER|20941|account] Updated category, uid=category uid
20942	Category created [Portal|CONTENTMANAGER|20942|account] Created category, uid=category uid
20943	Category deleted [Portal|CONTENTMANAGER|20943|account] Deleted category, uid=category uid
21001	Manual execution of a remote action through the Finder [Portal|REMOTEACTION|21001|account] Finder request manual execution of remote action, uid=remote action uid on n devices with uids devices uids
21002	External execution of a remote action through the API [Portal|REMOTEACTION|21002|account] API request manual execution of remote action, uid=remote action uid on n devices with uids devices uids
21003	External execution of a remote action through the API v2 [Portal|REMOTEACTION|21003|account] API request manual execution of remote action, uid=remote action uid on n devices with uids devices uids
21101	Metric compute triggered from the Finder [Portal|METRICS|21101|account] Compute metric from finder uid=metric uid
21102	Metric clear history triggered by query [Portal|METRICS|21102|account] Clear metric from query uid=metric uid
21103	Metric clear triggered from the Finder [Portal|METRICS|21103|account] Clear metric from finder uid=metric uid
21104	Metric compute triggered by query [Portal|METRICS|21104|account] Compute metric from query uid=metric uid
21201	Module published [Portal|MODULES|21201|account] Published module uid=module uid, name=module name|-
21202	Module deleted [Portal|MODULES|21202|account] Deleted module uid=module uid
21203	Module replaced [Portal|MODULES|21203|account] Replaced published module uid=module uid, replaced uid=module uid
21501	Dashboard deleted [Portal|DASHBOARDS|21501|account] Deleted dashboard, uid=dashboard uid
21301	Software metering metric updated [Portal|SOFTWARE_METERING_METRIC|21301|account] Updated software metering metric, uid=metric uid
21302	Software metering metric deleted [Portal|SOFTWARE_METERING_METRIC|21302|account] Deleted software metering metric, uid=metric uid
21303	Software metering metric enabled [Portal|SOFTWARE_METERING_METRIC|21303|account] Enabled software metering metric, uid=metric uid
21304	Software metering metric disabled [Portal|SOFTWARE_METERING_METRIC|21304|account] Disabled software metering metric, uid=metric uid
21401	Software metering module updated [Portal|SOFTWARE_METERING_MODULE|21401|account] Updated software metering module, uid=module uid
21402	Software metering module created [Portal|SOFTWARE_METERING_MODULE|21402|account] Created software metering module, uid=module uid