Audit log

Who changed what, from where. Every create, change, delete and restore, and every sign-in security event, is one entry in the store's audit log. Entries are chained by a hash, so nothing can be altered or removed afterwards without the chain showing it.

Steps

  1. Open Settings → Audit log. The newest events come first: time, user, action, the record and what changed (field: before → after), the device and IP address.
  2. Narrow the list with the search box (user, action, record or a changed value), or by User, Resource, Action and a date range.
  3. Click a record's id to open that record. Click “more changes” on an event to see all of its changes.
  4. Press Verify chain: the server re-hashes every event from the first and reports whether the chain is intact, or the first event where it is broken.
  5. Press Export CSV to download the filtered events (up to 5,000) for an auditor.

Tips

  • Only the store's owner and administrators (settings access) can read the audit log; nobody can edit it, not even StartERP.
  • Once a day the end of the chain is sealed; Verify chain also reports whether every daily seal still matches the log.
  • Passwords and secrets are never written to the log: an entry shows that such a field changed, never its value.
  • The log is kept by the server, so the demo shows an empty page.

In the app, press F1 or ? on this screen to open this guide next to your work.

Related guides

More guides in Settings & administration

All guides

Still need help?

Our team answers in Arabic and English by email and phone.

Contacthello@starterp.org