Server Audit Log

August 20, 2023

Survey Solutions server administrator may inspect the server audit log. The audit log lists important events that were initiated by the users on the server, identifying who made that action, and when.

For actions of interviewers, see the detailed actions log.

The server actually provides two kinds of audit logs: per workspace and server-wide.

  • To view the server audit log, the admin user should proceed to MenuAdministrationAudit log.
  • To view the audit log for a particular workspace, the admin user should proceed to MenuAdministration→ click on a workspace name in the list of workspaces → Audit log.

The audit log presents its records as a table with the following attributes:

  • LOG DATE - indicates date and time when the event occurred;
  • USER - name of the user account that performed the action that was logged;
  • EVENT TYPE - classification of the type of the logged event (see codes below);
  • LOG - records details about the logged event.

The log data can be exported in a form of a downloadable file in any of the following formats:

  • XLSX (Excel or compatible),
  • TAB (TAB-delimited values),
  • CSV (comma separated values).

The following actions/events are recorded in the audit log on the server (S denotes the event appears in the server-wide audit log, W denotes the event appears in the workspace-specific audit log):

#Log TypeEvent TypeLogged whenDetailsExample
1WQuestionnaireImporteda questionnaire is imported from the DesignerMentions name and version of the questionnaire being imported to the HQ server from the Designer(ver. 2) CENSUS_INDIA_2030: imported;
2WQuestionnaireDeleteda questionnaire and associated data are deletedMentions name and version of the questionnaire being deleted.(ver. 2) CENSUS_INDIA_2030: deleted;
3WExportStareda new export job is startedMentions name and version of the exported survey questionnaire and the data export format.CENSUS_INDIA_2030 v2 : exported; STATA
4WAssignmentsUpgradeStartedan upgrade of assignments between different questionnaire versions has been startedMentions questionnaire name, source version and destination version for assignment migration.Assignments: Upgrade; From (ver. 2) to (ver. 3) CENSUS_INDIA_2030
5SUserCreateda user account is createdMentions the role and login of the new user account that has been created.Headquarter user 'Headquarters1': created;
6WAssignmentSizeChangedan assignment size has been revisedMentions assignment number and new size value.Assignment 13091: size changed; 5
7WExportEncryptionChangedencryption setting (password protection) has changed (set on or off)Mentions whether the encryption was set to enabled or disabled state. Does not mention the password.Export encryption: changed; enabled'
Export encryption: changed; disabled'
8WUserMovedToAnotherTeaminterviewer is moved from one team to anotherMentions which user was moved from which team to which teamUser Natalia: moved; From team SupJohnson' to SupJackson
9WEmailProviderWasChangedchange in configuration of the bulk email providerMentions the previous and current provider.Update: Previous provider was None, current provider is SendGrid;
10WUsersImporteduser accounts were created in batch modeMentions how many accounts were created in batch mode in total, and by role.Users: Import; User Headquarters1 created 8 users in batch mode, of which 7 are interviewers and 1 supervisors
11WAssignmentsImportednew assignments were done by uploading a preloading fileMentions questionnaire name and version for the imported questionnaire(ver. 2) CENSUS_INDIA_2030: imported;
12SInterviewerArchivedan interviewer account gets archivedMentions admin account name and interviewer account name that was archived.Interviewer: Archive; User admin has archived interviewer account Natalia
13SInterviewerUnArchivedan interviewer account is restored from the archived stateMentions admin account name and interviewer account name that was unarchived.Interviewer: Unarchive; User admin has unarchived interviewer account Natalia
14SSupervisorArchiveda supervisor account gets archivedMentions admin account name and supervisor account name that was archived.Supervisor: Archive; User admin has archived supervisor account Natalia
15SSupervisorUnArchiveda supervisor account gets restored from the archived stateMentions admin account name and supervisor account name that was unarchived.Supervisor: Unarchive; User admin has unarchived supervisor account Natalia
16SWorkspaceCreatedA new workspace is created on the server.Mentions the name and display name of the created workspace.workspace: wspace1; Workspace 1
17SWorkspaceDeletedA workspace is deleted on the server.Mentions the name of the workspace.workspace: wspace1;
18SWorkspaceDisabledA workspace is disabled on the server.Mentions the name of the disabled workspace.workspace: wspace1;
19SWorkspaceEnabledA workspace is enabled on the server.Mentions the name of the enabled workspace.workspace: wspace1;
20SWorkspaceUserAssignedA user is given access to a workspace on the server.Mentions the name of the user and one or more workspace names.SergiyInt: primary, wspace1, wspace2;
21SWorkspaceUserUnassignedA user access to a workspace on the server is revoked.Mentions the name of the user and one or more workspace names.SergiyInt: primary, wspace1, wspace2;
22SWorkspaceUpdatedDisplay name of a workspace has been changed.Mentions the name of the workspace followed by the old and the new workspace display names.wspace1: Workspace 1; Workspace 2;
23S,WUserPasswordChangedA user password has been successfully changed.Mentions the name of the user.user 'SergiyInt':password changed;
24S,WUserPasswordChangeFailedAn attempt to change the user password was not successful (for example, the new password does not satisfy the effective minimum length requirement).Mentions the name of the user.user 'SergiyInt': password change failed;
0S,WUnknownReserved: This value should not be observed in practice by the end-users of the application.

Note on the timestamp: when a user reads the audit log online, the timestamps are automatically converted to the time zone of this user. But if the user opts to download the audit log as a file, all timestamps are saved in the UTC time zone, thus the same event may have different timestamps when the audit log is viewed online on the server and offline from a downloaded file.