Log Audit Search
Build trust and confidence in your Nodinite environment with Log Audit Search—your always-on, tamper-proof audit trail for every sensitive operation. This feature cannot be disabled, ensuring you always have a complete record of who did what, when, and how. Instantly track, search, and correlate user and system actions to support compliance, security, and operational transparency.
- ✅ Instantly search and filter audit logs for compliance and security
- ✅ Correlate related operations for full traceability
- ✅ Empower administrators to track user and system actions
- ✅ Always-on auditing—cannot be disabled, providing confidence and trust
- ✅ Meet regulatory requirements and internal policies with ease
Find out who did what, when, and how. Whether you have a Policy or a need for Compliance, Nodinite automatically audits all sensitive operations performed by both Users and the system itself.
Log Audit Search opens from Administration › Tools in the Web Client. Members of the built-in Administrators Role can see who did what and when, for operations performed by the Nodinite Core Services and by end users.
Understanding Log Audits
Web Client and Web API"] -->|"sensitive operations"| LA["fa:fa-clipboard-list Log Audit records"] S["fa:fa-gears Core Services
Monitoring and Logging Service"] -->|"system operations"| LA LA --> Search["fa:fa-magnifying-glass Log Audit Search
filter and Show Related"] LA -->|"older than DaysToKeepLogAudits"| Clean["fa:fa-broom Deleted by the
Logging Service cleanup"] style U fill:#2678BD,color:#fff style S fill:#9E59BB,color:#fff style LA fill:#3F827B,color:#fff style Search fill:#93d16d,color:#000 style Clean fill:#c33d34,color:#fff
Blue and purple: the two sources of audited operations, people and the system. Teal: the records. Green: where administrators search them. Red: records older than DaysToKeepLogAudits are deleted for good.
Examples of what is audited, from other pages in this documentation:
- Removing or purging Alarm Queue entries
- Deleting and restoring configuration records; see Show deleted records
- Messages too large to process, see MessageProcessingMaxBodySize
- Monitoring Service work such as synchronizing Resources with a Monitoring Agent

One way to open Log Audit Search: the Tools card on the Administration Overview page.
How do I find out who did what and when?
As an administrator, you can search with these filters:
- Date: Specify the time threshold for your search.
- Operation: Search for keywords or sentences by Log Audited operations.
- Users: Search for a specific user linked to the logs (Note: users from Windows AD Groups are inaccessible).
- Level: Search for a particular type of entry, e.g. Information, Error, Warning, Critical.
- Function: The Nodinite internal name of a function, most often used when troubleshooting reported issues.

Combine filters to narrow down a large audit trail.
Click the Search button to get results for your current search options, then drill down and correlate related operations.
Nodinite keeps Log Audit records for the number of days set in the DaysToKeepLogAudits System Parameter (default 90); the Logging Service deletes older records on its next cleanup run, scheduled by CleanUpTimerInterval.

Each row shows the level, when it happened, the operation, who did it, and the function.
Show Related
Many operations involve multiple steps that may be part of a distributed transaction and span numerous operations. Click the Action button and select Show Related to retrieve all correlated audit entries and see the full context of a complex operation.

Show Related is available on every entry in the result.
Related operations load as in the following screenshot:

The modal also offers Copy API URL, to run the same search through the Web API.
Get alerted on Log Audit content
Use the Web Services Monitoring Agent to raise alerts based on Log Audit content; see How to Monitor Log Audit.
Why Log Audit Search Matters
Log Audit Search is your foundation for trust and accountability. With Nodinite, you know what happened, who did it, and when. It helps you:
- Prove compliance to auditors and stakeholders
- Investigate incidents and resolve issues faster
- Detect unauthorized changes and support security policies
Next Steps
- Roles
- DaysToKeepLogAudits - How long Log Audit records are kept
- How to Monitor Log Audit
Related Topics
- Tools overview
- Users
- Web API
- Alarm Queue - Removed or purged Alarm Queue entries are audited
- Show deleted records - Restores are audited
- Missing Distributed Notifications - Troubleshoot alerts missing from a Monitor View's history
- MessageProcessingMaxBodySize - Messages too large to process get a Log Audit entry
- Logging Service