EMBEDDED AUDIT TRAIL

The purpose of the Embedded Audit Trail service is to audit the activities performed by Protheus users in the database. Its premises are:

- High performance

- Easy installation and configuration

- Simple operation

- Safety

For the complete Embedded Audit Trail configuration documentation, access the links below:
Configure Embedded Audit Trail

RECORD LOG - CFGX025

It audits the records of a table, showing the last user who edited/added a record in that table, the date, and also whether the record was deleted.
To enable
P12/P11: Fields _USERLGI and _USERLGA in the table.
- Access the table that will have the audited records by Configurator > Database > Dictionary > Databases. In Fields, click the last Reserved Fields button. 

- Check the Inclusion Log box and click Finish.

- Open the Reserved Fields again, check the Edit Log box and click Finish.

- On the Fields list screen, click Confirm, and on the table listing screen, click Update Database.

- Click Next until Finish. At the end, this table will already be with the records being audited.

To access this report

P12: You must manually add the CFGX025 routine to the Configurator menu.

- For information on how to include a menu item, go to: Menu customization

P11: Configurator > User > Audit > Record Log

- After accessing the routine from the menu, select the table where you have enabled the _USERLGI and _USERLGA fields. A record must have been added or edited in the table after setting the resource for the report to be displayed.

- On the next screen, select the record and click View. The Record Log appears.

FIELD LOG - CFGX052

Allows you to configure auditing for fields individually.
To enable
P12: You must manually add the CFGX052 routine to the Configurator menu.

- For information on how to include a menu item, go to: Menu customization

P11: Configurator > User > Audit > Config. Log Audit

- After accessing the routine from the menu, click on the Include button.

- In Table, enter the name of the table that will have audited fields.

- In Field, enter the name of the field to be audited (to add fields, press the down arrow on the keyboard).

- Click Operation, then Other Actions (Related Actions) and Select LOG type.

- In the LOG Type window, you can select which options will be audited in the selected field: Inclusion / Edition / Deletion. There are also options of Type of Update. Check the details of each one of them below:
* Update the selected field: sets the Inclusion, Edition and/or Deletion option to for the field selected by clicking the Select LOG type button.

* Update only blank fields: sets the Inclusion, Edition and/or Deletion option for fields without configuration

* Update all fields: sets the Inclusion, Edition and/or Deletion option for all fields listed on the Field LOG Setting screen.

- After setting, click Confirm.

To access the report

P12: You must manually add the CFGX053 routine to the Configurator menu.

- For information on how to include a menu item, go to: Menu customization

P11: Configurator > User > Audit > Log Audit Query

- After accessing the routine from the menu, click Param.
- On the Parameters screen, fill in the table data, user and date you want to view, click OK, then OK again.

- A screen will display table information, operation, user, date and time.

AUDIT TRAIL 

Audit Query - User Audit - APCFGR50

Audits the denial of users' attempts to access blocked resources. For example, attempting to access a routine blocked by Privileges.

To enable: Configurator > User > Passwords > Policy > Other Tab > Audit Rules > Audit Updates in Data Dictionary = Yes

To access the report: Configurator > Database > Audit > Audit Query (in P11 you need to create an item in the Configurator menu for the APCFGR50 routine).

Audit Report - Audit Trail (or Audit User - User Trail in P11) - APCFGR10

Audits changes made to users in the Configurator, showing which user was changed, the user who made the change, the date and time, the previous value and the updated value, etc.

To enable: Configurator > User > Passwords > Policy > Other Tab > Audit Rules > Audit Updates in user register = Yes

To access the report: Configurator > Database > Audit > Audit Report (or Audit User in P11)

Dictionary Audit - Dictionary Trail - APCFGR20

Audits updates in the data dictionary made by the Configurator, showing previous and updated information, table, field, user who made the change, etc.

To enable: Configurator > User > Passwords > Policy > Other Tab > Audit Rules > Audit Updates in Data Dictionary = Yes

To access the report: Configurator > Database > Audit > Dictionary Audit

User Status - User Trail - APCFGR30

Audits the status of users on the system, showing whether they are active or inactive, the date the user was created, the date of the last change, and the user who made the change.

To enable: Configurator > User > Passwords > Policy > Other Tab > Audit Rules > Audit Updates in user register = Yes

To access the report: Configurator > Database > Audit > User Status

Access Log - Access Trail - APCFGR40

Audits users' Log In and Log Out, showing the date, time and IP address of the users.

To enable: Configurator > User > Passwords > Policy > Other Tab > Audit Rules > Audit authentication/access = Yes

To access the report: Configurator > Database > Audit > Access Log