Understanding Audit Logs

Audit Logs provide a record of all user and system activities within the Zoho IoT application in chronological order. For example, activities such as creating a device, deleting a datapoint, or updating a map are all logged in the audit logs. This can be viewed for selected periods in the Audit Logs page.

Note: Users with the Administrator and Manager profile can access entire organization’s audit logs, whereas Developer and Standard users can view their own audit logs only.

Note: Refer to the Working with Audit Logs document for accessing and viewing the audit logs.

Image: A list of audit logs

Audit Logs Vs Timelines

Audit Logs track activities performed across all records in the Zoho IoT application at a common place. This helps to understand the overall happenings in the application. Whereas the Timeline feature focuses on specific records, detailing all actions taken on individual records. These details are helpful in analyzing any problem occurred in a particular device, asset, location, map, alarm rule, datapoint, etc.

Uses of audit logs are listed below.

Helps to know the changes (mostly all CRUD operations) on all records that happened across the application.
Helps to track the flow of actions across the application as it is displayed in chronological order.
Allows to filter and view actions performed by a particular user across the application.
Allows to filter and view actions performed by a given user or action in a given module or specific type of action.

Uses of timeline logs are listed below.

Helps to know even minor details about the updates on records.
Provides the old and new values for a record in the case of update action.
Provides more specific details. For example, in the case of email triggers, you can know the recipient email IDs as well.

Timeslines can be viewed directly from the respective records' information page. For example, the Timelines for Asset ZB PN11 in the above video can be accessed from the particular asset's information page also.

Note: Refer to the Understanding Timelines document for more details.

Let's proceed to see the list of features that are audited in the application.

Audit Logs List

The below tables provide the list of actions that are audited and displayed in the Audit Logs page in the application:

1. MODEL & MODULE Actions

Feature	Actions Performed
Models/Modules/Custom Modules	Add Model/Module
	Update Model/Module
	Delete Model/Module
Device/Asset Models Specific	Associate Product to Model

Feature	Action Performed
Custom Module Records	Add Custom Module records
	Update Custom Module records
	Delete Custom Module records

Feature	Actions Performed
System Modules (Manufacturer/Vendor/Products)	Add Custom Module records
	Update Custom Module records
	Delete Custom Module records
	Assign Custom Module

2. MODEL & MODULE Customizations

Feature	Actions Performed
Custom Field Datapoints Template Command Templates Alarm Rules Template Support Products Message Handler	Add/Update/Delete Custom Field to Model
	Add/Update/Delete Datapoint to Model
	Add/Update/Delete Commands to Model
	Add/Update/Delete Alarm Rules to Model
	Add/Update/Delete Supported Products to Model
	Add/Update/Delete Message Handler to Model

3. MANAGED ENTITY Actions

Feature	Actions Performed
Managed Entities (Assets/Devices/Locations)	Add Instance
	Update Instance
	Delete Instance
	Associate Gateway
	Associate Location to Instance
	Reregister/ Unmanage/ Simulate device instance
	Add Asset/ Add Device Action in Location
	Execute Config Settings
	Add/Delete Attachments
	Add/Update Datapoint to Instance
	Add/Update Alarm Rule to Instance
	Add/Update Command to Instance

4. AUTOMATION

ACTIONS

Feature	Actions Performed
Custom Functions	Add Custom Function
	Update Custom Function
	Delete Custom Function
	Execute Custom Function Action (Success/Failure)

Feature	Actions Performed
Email Notification	Add Email Notification
	Update Email Notification
	Execute Email Notification Action (Success/Failure)

Feature	Actions Performed
Webhook	Add Webhook Action
	Update Webhook Action
	Delete Webhook Action
	Associate Webhook Action
	Execute Webhook Action (Success/Failure)

SCHEDULES

Feature	Actions Performed
Schedules	Add Schedules
	Update Schedules
	Delete Schedules
	Execute Schedules

WORKFLOW

Feature	Actions Performed
Workflow Rules	Add Workflow Rules
	Update Workflow Rules
	Delete Workflow Rules
	Execute Workflow Rules

5. DEVICE MANAGEMENT - Certificates & Policies

Feature	Actions Performed
Certificate	Add Certificate
	Update Certificate
	Delete Certificate
	Activate Certificate
	Deactivate Certificate
	Revoke Certificate
	Assign Device to Certificate
	Assign Policy to Certificate

Feature	Actions Performed
Policy	Add Policy
	Update Policy
	Delete Policy
	Assign Certificate to Policy

6. USERS & CONTROLS

Feature	Actions Performed
Users	Add User
	Update User
	Delete User
	Activate User
	Deactivate User
	Re-invite User

Feature	Actions Performed
User Groups	Add User Group
	Update User Group
	Delete User Group

Feature	Actions Performed
Profiles	Add Profile
	Update Profile
	Delete Profile

Feature	Actions Performed
Data Slicing	Add Data Slicing Rule
	Update Data Slicing Rule
	Delete Data Slicing Rule

Feature	Actions Performed
GDPR - Compliance	Enable GDPR
	Update GDPR Compliance Settings
	Disable GDPR

Feature	Actions Performed
Email Preference Email Authentication	Changed Sender
	Add Sender
	Edit Sender
	Delete Sender
	Verified the Sender
	Resent the Code
	Authenticated the Domain

8. MONITORING & CONTROL Actions

Feature	Actions Performed
Alarms	Add Alarms
	Delete Alarms
	Clear Alarms & Assign Alarm

Feature	Actions Performed
Alarm Rule Action Notification Profile Action Workflow Action Scheduler Action	Associate Actions such as Webhook, Custom Function, etc., to Alarm Rule Template for Asset.
	Disassociate Actions such as Webhook, Custom Function, etc., from Alarm Rule Template for Asset.

Feature	Actions Performed
Alarm Rule Action	Add Alarm Rule Action
	Update Alarm Rule Action
	Delete Alarm Rule Action
	Associate Alarm Rule Action
	Disassociate Alarm Rule Action
	Execute Alarm Rule Action (Success/Failure)

Feature	Actions Performed
Custom Function	Add Custom Function
	Update Alarm Rule Action
	Delete Alarm Rule Action
	Associate Alarm Rule Action
	Disassociate Alarm Rule Action
	Execute Alarm Rule Action (Success/Failure)

Feature	Actions Performed
Commands	Command Initiates (via Scheduler)
	Command executed (via Scheduler) (Success/Failure)
	Command Initiates (via Alarm Rule)
	Command executed (via Alarm Rule) (Success/Failure)
	Add/Delete Message Handler to Instance

Feature	Actions Performed
Notification Profiles	Add Notification Profile
	Update Notification Profile
	Delete Notification Profile
	Execute Notification Profile

9. VISUALIZE Actions

Feature	Actions Performed
Dashboard	Add Dashboard
	Update Dashboard
	Delete Dashboard

Feature	Actions Performed
Widgets	Add Widget
	Update Widget
	Delete Widget

Feature	Actions Performed
Reports	Add Report
	Update Report
	Delete Report

Feature	Actions Performed
Schedule Report	Create Schedule
	Update Schedule
	Generate and Send Report
	Report Generation Failed
	Report Sending Failed
	Schedule Completed
	Schedule Deleted

Feature	Actions Performed
Export Report	Exported the Report

Feature	Actions Performed
Maps	Add Map
	Update Map
	Delete Map

10. GENERAL Actions

Feature	Actions Performed
Application Settings	Update
	Owner Change

Feature	Actions Performed
Custom Views	Add Custom Views
	Update Custom Views
	Delete Custom Views

Feature	Actions Performed
Connections	Add Connections
	Update Connections
	Delete Connections

Understanding Audit Logs in Zoho IoT: A Comprehensive Guide

Understanding Audit Logs

Audit Logs Vs Timelines

Audit Logs List