Viewing audit log files

Content Manager uses the application LogView to display its audit log files, which have the extension .talf. The Content Manager Workgroup Server typically saves them to C:\Content Manager\ServerData\TRIM\<database ID>\AuditLogs\.

The audit log file viewer displays the contents of the log files as rows and columns. When available, you can see more detail about an item when you select the row.

The Refresh button re-loads the log file to update the information in the viewer.

You can click the column headers to sort the information by that column.

The columns in the audit log viewer:

  • Event - each event listed in the Administration - System Options - Audit Options tabs has a short description associated with it outlining the nature of the event, for example, User Logged In, Record Content Added, Record Container Changed, etc. The Event column displays the short descriptor of the event that generated the log item.
  • Time - the date and time that the item was recorded.
    This date/time is recorded in GMT format, so the local time is first converted according to the system clock settings and then entered in the log.
  • Done By - the user who was responsible for the log item is recorded here
  • Item Affected - the Content Manager item that was changed
  • On Computer - the name of the computer the Content Manager user was logged on to when the event was recorded in the log
  • ID Number - the identification number associated with the logged on user's Content Manager Location.

    This is specified in the ID Number field in the Location Properties. This field is used to uniquely identify the user from the log item.

  • Time(Source) - the local computer date and time of the item change.

    This is the GMT date converted back to the local system time format.

  • Time(Server) - the server date and time of the item change
  • Owner - the Owner Location of the record that is generating the event

    Therefore, when the event generated is not record related - for example, a Location is modified - this field is blank.

  • Related Item - record number related to the item that was changed
  • Update Comment - user-provided update comments from the item's Properties dialogue
  • Extra Details - more detail about the log item, if available
  • Event ID - the unique identification number of the event that generated the log item
  • Object ID - the object identification number of the type of object associated with the log entry, for example, Locations = 9, Classifications = 21, Records = 6
  • Object URI - the unique record identifier, which relates to the object location in the Content Manager database table of objects
  • Related ID - the identification number of related types of objects in the change, see also Object ID. 0 means that no other object types were involved in the change, like logging in or out, for example.
  • Related URI - the unique record identifier of the item related to the change

Related Topics Link IconRelated information