Audit trail codes Portal (classic)

The audit trail codes on this page apply to Portal, Nexthink Experience.

Refer to the Audit trail codes Infinity documentation for audit trail codes that apply to Nexthink Infinity.

Refer to the Exporting audit logs to learn how to query audit trail codes.

Code	Description
20001	Portal is starting `[Portal\|SYSTEM\|20001\|*system] Portal is starting`
20002	Portal is up and running `[Portal\|SYSTEM\|20002\|*system] Portal is up and running`
20004	Portal is stopped `[Portal\|SYSTEM\|20004\|*system] Portal is stopped`
20101	User logged in `[Portal\|LOGIN\|20101\|account] User account logged with session id session id`
20102	User logged out `[Portal\|LOGIN\|20102\|account] User account logout for session id session id`
20103	User login failed `[Portal\|LOGIN\|20103\|*system] User account failed login attempts - reason`
20104	User locked `[Portal\|LOGIN\|20104\|account] User account is locked`
20201	User created `[Portal\|USER\|20201\|account] User created account is created`
20202	User removed `[Portal\|USER\|20202\|account] User deleted account is removed`
20203	User updated `[Portal\|USER\|20203\|account] User updated account is created`
20204	User profile updated `[Portal\|USER\|20204\|account] Updated profile of n users`
20205	User domain ownership updated `[Portal\|USER\|20204\|account] Updated account ownership of n users`
20206	Role added `[Portal\|USER\|20206\|account] Role name is added`
20207	Role updated `[Portal\|USER\|20207\|account] Role name is updated`
20208	Role removed `[Portal\|USER\|20208\|account] Role name is removed`
20209	Profile added (with roles) `[Portal\|USER\|20209\|account] Added profile name roles: roles names`
20210	Profile updated (with roles) `[Portal\|USER\|20210\|account] Updated profile name roles: roles names`
20211	Profile removed `[Portal\|USER\|20211\|account] Removed profile name`
20501	Hierarchy added `[Portal\|HIERARCHY\|20501\|account] Hierarchy name is added`
20502	Hierarchy removed `[Portal\|HIERARCHY\|20502\|account] Hierarchy name is removed`
20503	Hierarchy updated `[Portal\|HIERARCHY\|20503\|account] Hierarchy name is updated`
20504	Definition of entities updated `[Portal\|HIERARCHY\|20504\|account] CSV of entities category is updated`
20505	Collector assignment updated `[Portal\|HIERARCHY\|20505\|account] Collector Assignment entities category is updated`
20701	Engine added `[Portal\|ENGINE\|20701\|account] Engine name of IP IP address or DNS name Port port number is added`
20702	Engine removed `[Portal\|ENGINE\|20702\|account] Engine name of IP IP address or DNS name Port port number is removed`
20703	Engine connected `[Portal\|ENGINE\|20703\|account] Engine name of IP IP address or DNS name Port port number is connected`
20704	Engine disconnected `[Portal\|ENGINE\|20704\|account] Engine name of IP IP address or DNS name Port port number is disconnected`
20801	Finder user logged in `[Portal\|FINDER\|20801\|account] User account logged in (finder)`
20803	Finder user login failed `[Portal\|FINDER\|20801\|account] User account login failed`
20804	Library pack import request (only issued for big packs) `[Portal\|FINDER\|20804\|account] Finder import req uid=pack uid`
20901	Remote action updated `[Portal\|CONTENTMANAGER\|20901\|account] Updated remote action in content manager, uid=remote action uid, name=remote action name`
20902	Remote action created `[Portal\|CONTENTMANAGER\|20902\|account] Created remote action in content manager, uid=remote action uid, name=remote action name`
20903	Remote action deleted `[Portal\|CONTENTMANAGER\|20902\|account] Deleted remote action in content manager, uid=remote action uid`
20911	Metric updated `[Portal\|CONTENTMANAGER\|20911\|account] Updated metric in content manager, uid=metric uid, status=enabled\|disabled`
20912	Metric created `[Portal\|CONTENTMANAGER\|20912\|account] Created metric in content manager, uid=metric uid`
20913	Metric deleted `[Portal\|CONTENTMANAGER\|20913\|account] Deleted metric in content manager, uid=metric uid`
20921	Service updated `[Portal\|CONTENTMANAGER\|20921\|account] Updated service in content manager, uid=service uid, status=enabled\|disabled`
20922	Service created `[Portal\|CONTENTMANAGER\|20922\|account] Created service in content manager, uid=service uid`
20923	Service deleted `[Portal\|CONTENTMANAGER\|20923\|account] Deleted service in content manager, uid=service uid`
20931	Campaign updated `[Portal\|CONTENTMANAGER\|20931\|account] Updated campaign in content manager, uid=campaign uid, name=campaign name, status=draft\|published\|retired`
20932	Campaign created `[Portal\|CONTENTMANAGER\|20932\|account] Created campaign in content manager, uid=campaign uid, name=campaign name`
20933	Campaign deleted `[Portal\|CONTENTMANAGER\|20933\|account] Deleted campaign in content manager, uid=campaign uid`
20941	Category updated `[Portal\|CONTENTMANAGER\|20941\|account] Updated category, uid=category uid`
20942	Category created `[Portal\|CONTENTMANAGER\|20942\|account] Created category, uid=category uid`
20943	Category deleted `[Portal\|CONTENTMANAGER\|20943\|account] Deleted category, uid=category uid`
21001	Manual execution of a remote action through the Finder `[Portal\|REMOTEACTION\|21001\|account] Finder request manual execution of remote action, uid=remote action uid on n devices with uids devices uids`
21002	External execution of a remote action through the API `[Portal\|REMOTEACTION\|21002\|account] API request manual execution of remote action, uid=remote action uid on n devices with uids devices uids`
21003	External execution of a remote action through the API v2 `[Portal\|REMOTEACTION\|21003\|account] API request manual execution of remote action, uid=remote action uid on n devices with uids devices uids`
21101	Metric compute triggered from the Finder `[Portal\|METRICS\|21101\|account] Compute metric from finder uid=metric uid`
21102	Metric clear history triggered by query `[Portal\|METRICS\|21102\|account] Clear metric from query uid=metric uid`
21103	Metric clear triggered from the Finder `[Portal\|METRICS\|21103\|account] Clear metric from finder uid=metric uid`
21104	Metric compute triggered by query `[Portal\|METRICS\|21104\|account] Compute metric from query uid=metric uid`
21201	Module published `[Portal\|MODULES\|21201\|account] Published module uid=module uid, name=module name\|-`
21202	Module deleted `[Portal\|MODULES\|21202\|account] Deleted module uid=module uid`
21203	Module replaced `[Portal\|MODULES\|21203\|account] Replaced published module uid=module uid, replaced uid=module uid`
21501	Dashboard deleted `[Portal\|DASHBOARDS\|21501\|account] Deleted dashboard, uid=dashboard uid`
21301	Software metering metric updated `[Portal\|SOFTWARE_METERING_METRIC\|21301\|account] Updated software metering metric, uid=metric uid`
21302	Software metering metric deleted `[Portal\|SOFTWARE_METERING_METRIC\|21302\|account] Deleted software metering metric, uid=metric uid`
21303	Software metering metric enabled `[Portal\|SOFTWARE_METERING_METRIC\|21303\|account] Enabled software metering metric, uid=metric uid`
21304	Software metering metric disabled `[Portal\|SOFTWARE_METERING_METRIC\|21304\|account] Disabled software metering metric, uid=metric uid`
21401	Software metering module updated `[Portal\|SOFTWARE_METERING_MODULE\|21401\|account] Updated software metering module, uid=module uid`
21402	Software metering module created `[Portal\|SOFTWARE_METERING_MODULE\|21402\|account] Created software metering module, uid=module uid`

Last updated 3 months ago