Creating an Audit Log for Attribute Changes

Version 8.4

Hello All,

I would like to know if there is a Rule or Script that I can use to create an audit log that showing on Advance Analytics → Audit for attribute changes, such as department changes, employment status changes, and designation changes. It would be great if we could also set a specific time period for tracking these changes.

Hi @fewthiraphat

You can write the listener rule and create a audit event under **Gear menu → Global Settings → Identity Mappings → Add New Attribute (or edit existing attribute) → Value Change Rule
**

Hi @fewthiraphat

You can use a Rule or script like below to create an Audit Event:

First, create a custom action for your audit by following the steps below:

Open the AuditConfig object and add the below option with the name of the custom audit action you want to create.

<AuditAction displayName="Example1" enabled="true" name="Example1"/>

Audit Event API can be used to create an Audit Event and set the values through different OOTB methods as listed below.

AuditEvent event = new AuditEvent();

event.setSource(“Source”);

event.setTarget(“Target”);

event.setAction(“Action”);

event.setString1(“String1”);

event.setString(“string2”);

Auditor.log(event);
1 Like

Couple of things you can do , You can try to write the audit log event from change value Rule in Identity Mapping or Create a Rule Based Lifecycle event and from there you can drive this functionality .

Thank you for you all, this is really help! :smiley:

We provide a history plugin that does this. History Plugin - Instrumental Identity
All attribute level changes are stored as OOTB audit events and can be viewed within certain time frames, extracted to a warehouse or reported on easily. The UI also allows for easy filtering. We also describe how it works in relation to Access History The History Plugin and IIQ's Access History - Instrumental Identity.