Note: If you do not specify any information on this page, your query returns a description of every audit record that is stored in the database.
To issue a system-wide query for information on the audit records stored in the database:
Under Search Criteria, limit the information returned by your query:
To limit your query to a particular type of object, in the Item Type drop-down list, choose the object. For example, you might want to see only audit messages referring to modifications of content crawlers.
To limit your query to objects of a particular name, in the Item Name box, type the text you want to search for and, in the drop-down list, choose whether you want your search for approximate or exact matches. If you search for approximate matches, the portal returns items that include your text in any part of the name; if you search for exact matches, the portal returns only those items in which the item name equals the text you specify. For example, you could request only audit messages referring to actions on Sales content crawlers or Sales portlets by entering Sales in the text box and choosing Approximate.
To limit your query to actions performed by a particular user, in the Username box, type the text you want to search for and, in the drop-down list, choose whether you want to search for approximate or exact matches.
To limit your query to actions performed on a particular portal server, in the Server Name box, type the text you want to search for and, in the drop-down list, choose whether you want to search for approximate or exact matches. For example, you could retrieve messages for all jobs run on the Automation Service named PortalJobs.
To limit your query to audit messages containing a particular word, in the Word in Message box, type the text you want to search for. For example, to limit your query to all messages relating to a particular group, type the group name in this box.
To limit your query to particular types of messages, choose the types:
Item Change - entries corresponding to every time an object is edited.
Item Deletion - entries corresponding to every time an object is deleted.
Locked Account - entries corresponding to every time a user account is locked after a number of failed login attempts.
Security Change - entries corresponding to every time an object's security is edited.
User Login - entries corresponding to every time a user successfully logs in to the portal.
Global System Change - entries corresponding to every time an edit is made to the Global ACL Sync Map, the Global Property Map, the Global Document Type Map, the Global Object Property Map, or the User Information Property Map; every time job folders or Automation Services are registered; and every time global system settings are changed through the various portal utilities.
To limit your query to a particular period, in the Time Interval boxes, enter the starting and ending date and time you want to search.
By default, the most recent audit messages are displayed first. To change the sort to display the oldest audit messages first, choose Oldest to newest.
In the Results per page box, type the maximum number of messages to display per page.
To search audit messages, on the left, under Utility Settings, click Run Query.
To display the page associated with this help topic: