User Guide: Audit Log

1. Introduction

2. End User Guide

3. Notes

With this feature, WorkPoint extends the current audit log feature. It records audit log data per document library. The log can be accessed through the action bar on any document library, but it will only be accessible to by people or groups already defined in the settings of the current functionality.

Note that this feature is only available in the Modern UI version of WorkPoint.

There are several cases where this feature excels. One example is if a project manager wishes to see who of his project team has opened a specific document.

Another case is if a project manager wants to see if a certain document has been shared with external people.

A third example could be in a court case, if a company needs documentation that a specific external person has opened and/or downloaded a document.

A fourth case could be that a project manager wants an overview of all changes made to a document library during a specific time interval. This needs to go into a report. He can then use the export-to-excel feature to cumulate the data into an easy to present spreadsheet.

When opening an audit log, an interface like the one in the image below will open:

1. Select the operations (types of log entries) that you wish to be shown

2. Select a start date from when to pull log entries

3. Select an end date of when to pull log entries

4. If you wish to be shown log entries that relates to a specific user, select the user in this field

5. Select a maximum number of log entry results to show

6. Choose whether to search for results or to export to Excel

When a search is performed, the results will show below the search button:

If Export to Excel is chosen, depending on your browser settings, the system will either open the excel document in your browser, or start a download of the excel document. The Excel document looks like this:

This kind of search and export can be done both on a List/Library level or on individual documents.

Note that all the same audit log event as before will be recorded. The log is available in the same UI as the past audit log.

Also note that using the audit log will include a certain delay. Microsoft states that their audit log (from where we fetch the information) can be delayed by up to 30 minutes. Further, a WorkPoint job will run once every hour (minimum interval) to fetch the information from the SharePoint logs and add this to the logging database in WorkPoint. Therefore, it should be expected that this kind of information can be delayed by up to 1½ hour plus any overhead time regarding processing the audit logs (e.g. If lots of documents are changed in within a short period of time, it can take some time to process this information and store the information in the WorkPoint logging database).