Overview

The Intuiface Audit Trail is a historical record of all security-related actions connected to account access, product licensing, and experience usage, sharing, and deployment. Audit trails are proof that particular actions occurred and useful as evidence when troubleshooting the cause of unexpected events.

NOTE:

• The audit trail is exclusively available to Enterprise-level Intuiface accounts.
• Secondary accounts do not have audit trail access. Only primary accounts have access.
• Intuiface retains audit trail data for a rolling window of 365 days. With every passing day of data storage, the oldest day (366 days ago) is deleted.

Accessing the Audit Trail

The Intuiface Audit Trail can be accessed through the My Intuiface website, in the "View and Administer Account" section.

You can also access the page directly via its URL: https://my.intuiface.com/audit-trail

Audit Trail scope

The Intuiface Audit Trail contains every relevant action performed by Intuiface users

• logged into a primary Intuiface account
• logged into secondary accounts for that primary account
• accessing experiences shared by the primary or secondary accounts

The actions categories captured in the beta version of the Audit Trail feature are:

• User login / logout
  • Success
  • Failed login attempts
    • Account Locked -> this event will also send an email to both account owner and technical contact.
• Experience sharing (both by URL and with account)
• Experience download and publishing
• Remote deployment
• Player settings modification
• License (Composer and Player) activation and release
  • Failed login activations will not be recorded
• Audit trail access

Post-beta, we'll introduce Export to CSV and the following action categories:

• User profile management
• Secondary account access and management
• Analytics (data point processing for Players, chart creation, dashboard publishing, etc.)
• License purchase, subscription cancellation, etc.
• Experience storage management
• Credential key management

Understanding the Audit Trail

The Intuiface Audit Trail is divided into four columns

• Date (UTC)
  The date and time of the action, using Coordinated Universal Time (UTC).
• Account
  The email address of the primary account, secondary account, or shared-with third-party Intuiface account that performed the specified action.
• Action
  The event itself. If applicable, additional parameters and their values will be listed below the action name.
• IP Address
  The address of the device - or router - through which the action was initiated. (Be aware that if multiple devices access the Internet through a shared router, the Intuiface Audit Trail will not be able to distinguish one device from another.)

Sorting the list

Clicking a column title will sort the list chronologically for Date, numerically for IP Address, and alphabetically for Account and Action.

Refreshing the list

Click the Refresh icon to the right of the "Audit Trail Records" title - - if you want to refresh the list. This is typically only necessary if interested in viewing the latest records. All existing filters will be preserved.

Using your web browser's page reload option will reset all filters.

Filtering the Audit Trail

To the left of the Audit Trail actions list are various filtering options.

• Search
  Type a text string of at least two characters into this field. The audit trail will automatically filter based on the typed string.
• Date range
  Select the beginning and end date to display in the list.
• Account
  Select any combination of the primary and secondary accounts. This list will not include email addresses of shared-with Intuiface accounts. If nothing is selected, all options will be displayed in the audit trail.
• IP address
  Select any one or more of the IP addresses captured by the audit trail. If nothing is selected, all options will be displayed in the audit trail.
• Action type
  Either type or select the name of the action you'd like to focus on. Typing is best for filtering on a single action. Use checkbox selection to visualize multiple actions. If nothing is selected, all options will be displayed in the audit trail.
• Action result
  Select whether you'd like to see actions that passed, failed, or both. If nothing is selected, all options will be displayed in the audit trail.