Hi all,
I am trying to audit anything that changed through the debug page on YAML objects, etc.
I could not find anything Global setting->Audit Configuration.
Is there a way to do this? I want an audit for create, modify and delete for YAML objects.
Thanks in advance
Hello Rishav, for YAML objects, I would check this through the generic Debug audit, not a separate YAML-specific audit action.
Since YAMLConfig objects are managed from the Debug/Object Browser side, the closest OOTB option should be: Global Settings > Audit Configuration > General Actions > Debug Object Browser Change
After enabling it, I would test all three actions once, create, update and delete a YAMLConfig object, and then check: Intelligence > Advanced Analytics > Audit > Action = DebugObjectBrowserChange
That should confirm whether IIQ is capturing those YAML object changes in your version. It should show details like who made the change, when it happened, and the target object/class.
I would not expect it to show the full before/after YAML content or field-level diff though. For exact YAML change history, I would still keep the YAMLConfig export in Git or some change-control process.
@rishavghoshacc Yes @punna0001 is correct.
For same we have a SailPoint Documentation, you can go through it.
You can use the URL for configuring this behavior that you are looking for:
@rishavghoshacc If you don’t want to overload your audits with DebugObjectBrowserChange which will capture all changes made on all objects via debug, you can also consider adding YAMLConfig class entry in AuditConfig → under AuditClasses.
<AuditClass create="true" delete="true" name="YAMLConfig" update="true"/>
This’ll capture the logs like this:
