Audit Trails
DZDESK maintains comprehensive audit trails for security and compliance.
What's Logged
User Actions
| Action | Details Logged |
|---|---|
| Login | Time, IP, device, success/fail |
| Logout | Time, session duration |
| Request actions | Create, update, delete |
| Data exports | What, when, by whom |
| Setting changes | Before/after values |
Administrative Actions
| Action | Details Logged |
|---|---|
| User management | Create, modify, deactivate |
| Role changes | Old/new role |
| Permission changes | What changed |
| Configuration | All settings changes |
System Events
| Event | Details Logged |
|---|---|
| API access | Endpoint, method, response |
| Failed attempts | Action, reason, context |
| Security events | Alerts, detections |
Audit Log Format
Log Entry Structure
{
"timestamp": "2024-01-15T14:30:00Z",
"eventType": "request.updated",
"actor": {
"id": "usr_123",
"email": "user@company.com",
"role": "agent"
},
"resource": {
"type": "request",
"id": "req_456"
},
"changes": {
"status": {
"from": "open",
"to": "in_progress"
}
},
"context": {
"ipAddress": "192.168.1.100",
"userAgent": "Mozilla/5.0...",
"sessionId": "sess_789"
}
}
Accessing Audit Logs
In Dashboard
- Navigate to Settings > Audit Logs
- Use filters to search
- View log details
Required Permissions
- Admin role required
- Audit access logged
- Cannot modify logs
Log Retention
Retention Period
| Log Type | Retention |
|---|---|
| Security events | 2 years |
| User actions | 2 years |
| System events | 1 year |
After Retention
- Logs archived or deleted
- Based on policy
- Configurable per tenant
Filtering and Search
Available Filters
| Filter | Description |
|---|---|
| Date range | Start and end dates |
| Event type | Specific action types |
| User | Specific actor |
| Resource | Specific item |
Search Examples
- All logins today
- Actions by specific user
- Changes to specific request
- Failed authentication attempts
Export and Reporting
Export Formats
- CSV
- JSON
- PDF reports
Scheduled Exports
Configure automatic exports:
- Daily, weekly, monthly
- Email delivery
- Secure storage
Integration
SIEM Integration
Forward logs to:
- Azure Sentinel
- Splunk
- Other SIEM tools
API Access
Query logs via API:
- Real-time access
- Filter parameters
- Pagination support
Compliance
Regulatory Requirements
Audit logs support:
- KVKK compliance
- GDPR requirements
- SOC 2 audits
- ISO 27001
Audit Evidence
Logs provide evidence for:
- Access reviews
- Incident investigations
- Compliance audits
- Forensic analysis
Log Security
Tamper Protection
- Append-only logs
- No modification capability
- Integrity verification
- Separate storage
Access Control
- Admin-only access
- Access itself logged
- Role-based visibility
Related Topics
- Audit Logs - User guide
- KVKK/GDPR Notes - Compliance details
- Encryption - Log encryption