Security Manager Audit Report – meshIQ

Some of the content described in this article is available in meshIQ Manage versions 11 and greater. See meshIQ Highlights v11 for an overview of feature changes.

The Security Manager Audit report shows the audit history for all database interactions. See the Working with tables section of the Customizing the Security Manager interface article for information about navigating and customizing tables, including filtering options.

The database administrator will need to maintain the audit history.

Select Audit Report > Security Manager Audit to run this report.

Save report results

To save results, click the download button . You can choose the format for your file: .csv or .json.

A .csv or .json file with a unique file name will automatically download. Example: exported_data_1696952627733.csv or exported_data_1696952695407.json.
The file will contain all data from the report based on any filters that you have applied. By default, results are limited to 25,000 records.

Report Columns
Name	Description
User Name	User who performed the action in the security application.
Command	Specific command executed by the user. Refer to the Command and Description Details table below for details.
Description	General description of the command executed by the user (for example, Add role feature, Delete role feature). Refer to the Command and Description Details table below for details.
Data	Data values that were updated as a result of the user's action. For example, if a role was updated, the name of the role and the role ID. The Feature Code and Feature ID of the right that was updated are also included.
Timestamp	Unix timestamp of the action.
Date Time	Date and time the Command was executed (Locale Format).

Command and Description Details
Action	Command	Description
Refresh Security	REFRESH_SECURITY_FLAG	Refresh Security Flag Cache
User Settings	Not subject to audit.	Not subject to audit.
User Management
Add	INSERT_USER_UGROUP_RET	Inserts user with user group
Edit	UPDATE_USER	Updates user
Delete	DEL_USR	Delete user
Assign Groups	ADD_USER_TO_UGROUP UPDATE_USER	Insert user to user group Updates user
Remove from group	DEL_USER_FROM_UGROUP UPDATE_USER	Delete user from user group Updates user
User Group Management
Add	INSERT_USER_GROUP_RET	Adds user group
Add role to user group	ADD_ROLE_TO_UGROUP	Insert role to user group
Add server group to user group	ADD_MQGROUP_TO_UGROUPROLE	Insert server group to user group
Add object group to user group	ADD_OBJGROUP_TO_GROUPS	Insert object group to user group
Edit	UPDATE_USER_GROUP	Updates user group
Delete	DEL_ALL_FROM_UGROUP DEL_UGROUP	Deletes all users from user group Deletes user group
Remove role from user group	DEL_ROLE_FROM_UGROUP	Delete role from user group
Remove server group from user group	DEL_MQGROUP_FROM_UGROUPROLE	Deletes server group from user group
Remove object group from user group	DEL_OBJGROUP_FROM_GROUPS	Deletes object group from user groups
WSM & Domain User Group Compare	Copy from Domain to WSM: INSERT_USER_GROUP_RET	Adds user group
WSM & Domain User Group Compare	Copy from WSM to Domain: Not subject to audit.
Role Management
Add	INSERT_ROLE_RET	Inserts role
Add feature to role	UPDATE_ROLE_ADD_FEATURE	Adds role feature
Remove feature from role	UPDATE_ROLE_DEL_FEATURE	Delete role feature
Edit	UPDATE_ROLE	Updates role
Delete	DEL_ROLE	Deletes role
Clone	INSERT_ROLE_RET	Inserts role
Add feature to clone	UPDATE_ROLE_ADD_FEATURE	Adds role feature
Server Group Management
Add Server Group	ADD_MQGROUP_RET	Adds server group
Add Server Group entry	ADD_MQGROUP_ENTRY_RET	Adds server group entry
Update Server Group entry	UPDATE_MQGROUP_ENTRY	Updates server group entry
Delete Server Group entry	DEL_MQGROUP_ENTRY	Deletes server group entry
Edit	UPDATE_MQGROUP	Updates server group
Delete	DEL_MQGROUP	Deletes server group
Object Group Management
Add Object Group	INSERT_OBJ_GROUP_RET	Adds object group
Add Object Group Entry	ADD_OBJGROUP_ENTRY_EX_RET UPDATE_OBJ_GROUP	Adds object group entry Update object group
Edit Object Group Entry	UPDATE_OBJGROUP_ENTRY_EX UPDATE_OBJ_GROUP	Updates object group entry Update object group
Delete Object Group Entry	DEL_OBJGROUP_ENTRY UPDATE_OBJ_GROUP	Deletes object group entry Update object group
Edit	UPDATE_OBJ_GROUP	Update object group
Delete	DEL_OBJGROUP	Delete object group
Audit Management
Add	INSERT_AUDIT_RET	Inserts server audit
Edit	UPDATE_AUDIT	Updates server audit
Delete	DEL_AUDIT	Deletes audit
Trust Management
Add	INSERT_TRUST_RET	Inserts trust
Edit	UPDATE_TRUST	Updates trust
Delete	DEL_TRUST	Deletes trust
Export Data (Data Backup)	Upon successful backup: WSM_DATA_BACKUP	Upon successful backup: WSM Data backup
Export Data (By Groups)	Not subject to audit.	Not subject to audit.
Import Features/Permits	Features added through import are audited in the same way as features added manually. Refer to the Role Management section earlier in this table.
Import Data (By Groups)	Objects added through import are audited in the same way as objects added manually. Refer to the Object Group Management section later in this table.
Restore Data	Before restore: Object groups, roles, server groups, users, user groups, trust statements, and audit statements are all deleted. DEL_OBJGROUP_ALL DEL_ROLE_ALL DEL_MQGROUP_ALL DEL_USR_ALL DEL_USER_GROUP_ALL DEL_TRUST_ALL DEL_AUDIT_ALL
	During restore: RESTORE_TRUST_DATA RESTORE_OBJECT_GROUP_DATA RESTORE_SERVER_GROUP_DATA RESTORE_ROLE_GROUP_DATA RESTORE_USER_GROUP_DATA RESTORE_USER_DATA RESTORE_AUDIT_DATA	During restore: Restores trust data Restores object group data Restore server group data Restores role data Restores user group data Restores user data Restores audit data
	Upon successful restore: WSM_DATA_RESTORE	Upon successful restore: WSM Data restore
API Role Management
Add	INSERT_ROLE_RET	Inserts Api Role
Add feature to API role Some features incorporate more than one feature record. For example, Show API Roles incorporates feature IDs 956, 957, and 964. Manage User Settings/Info incorporates feature IDs 961, 962, and 965.	UPDATE_API_ROLE_ADD_FEATURE	Adds api role feature
Edit	UPDATE_ROLE	Updates Api Role
Delete feature from API role	UPDATE_API_ROLE_DEL_FEATURE	Delete api role feature
Delete	DEL_ROLE	Deletes Api Role
Clone	INSERT_ROLE_RET	Inserts Api Role
Add feature to clone	UPDATE_API_ROLE_ADD_FEATURE	Adds api role feature
Assign a new group to the API Role	UPDATE_ROLE UPDATE_API_ROLE_ADD_GROUP	Updates Api Role Adds api role group
Remove a group from the API Role	UPDATE_ROLE UPDATE_API_ROLE_DEL_GROUP	Updates Api Role Delete api role group