[GH-ISSUE #929] FEATURE REQUEST: Audit Logs #487

Closed
opened 2026-03-02 12:42:37 +03:00 by kerem · 6 comments
Owner

Originally created by @nc-azure on GitHub (May 19, 2022).
Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/929

Hi,

Is it possible to view the audit logs from CIPP in regards to, which user made changes on CIPP?
If looking on the customers tenant, after making a change, it refers to the Global Admin account which was used for setting up CIPP rather than the Engineer who made the changes.

If there is a workaround, please advise :)

Originally created by @nc-azure on GitHub (May 19, 2022). Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/929 Hi, Is it possible to view the audit logs from CIPP in regards to, which user made changes on CIPP? If looking on the customers tenant, after making a change, it refers to the Global Admin account which was used for setting up CIPP rather than the Engineer who made the changes. If there is a workaround, please advise :)
kerem 2026-03-02 12:42:37 +03:00
Author
Owner

@KelvinTegelaar commented on GitHub (May 19, 2022):

already exists, Avatar icon -> Logbook

<!-- gh-comment-id:1131411515 --> @KelvinTegelaar commented on GitHub (May 19, 2022): already exists, Avatar icon -> Logbook
Author
Owner

@nc-azure commented on GitHub (May 19, 2022):

Hi Kelvin,

Thank you for the fast response.

As you could imagine, certain customers would like an export of the logs on certain investigations.
This Logbook doesn't display a username of the Engineer.
Is this already available or is this something that needs to be enabled?

Thank you
Brendan

<!-- gh-comment-id:1131421396 --> @nc-azure commented on GitHub (May 19, 2022): Hi Kelvin, Thank you for the fast response. As you could imagine, certain customers would like an export of the logs on certain investigations. This Logbook doesn't display a username of the Engineer. Is this already available or is this something that needs to be enabled? Thank you Brendan
Author
Owner

@KelvinTegelaar commented on GitHub (May 19, 2022):

The logbook shows the engineers UPN, e.g:

2022-05-19T09:40:34
Global
ExecDnsConfig
Retrieved DNS configuration
admin@admin.com
Info```
<!-- gh-comment-id:1131422916 --> @KelvinTegelaar commented on GitHub (May 19, 2022): The logbook shows the engineers UPN, e.g: ``` 2022-05-19T09:40:34 Global ExecDnsConfig Retrieved DNS configuration admin@admin.com Info```
Author
Owner

@nc-azure commented on GitHub (May 19, 2022):

I do apologize Kelvin, I must be doing something wrong.
Please see screenshots attached of what I can see.
Logbook
Logbook result

<!-- gh-comment-id:1131430355 --> @nc-azure commented on GitHub (May 19, 2022): I do apologize Kelvin, I must be doing something wrong. Please see screenshots attached of what I can see. ![Logbook](https://user-images.githubusercontent.com/101307591/169254987-8c6144bb-95b0-466d-a9f3-720bb7af5bf2.png) ![Logbook result](https://user-images.githubusercontent.com/101307591/169254997-e1d571fc-5779-4dc1-8461-659b65225a02.png)
Author
Owner

@KelvinTegelaar commented on GitHub (May 19, 2022):

Standards run under the system user, you can see who setup a standard in the logbooks, or on list applied standards page, in the last two columns.

<!-- gh-comment-id:1131432573 --> @KelvinTegelaar commented on GitHub (May 19, 2022): Standards run under the system user, you can see who setup a standard in the logbooks, or on list applied standards page, in the last two columns.
Author
Owner

@nc-azure commented on GitHub (May 19, 2022):

I see, thank you for your responses Kelvin.
Really appreciate it and really loving CIPP :)

<!-- gh-comment-id:1131503626 --> @nc-azure commented on GitHub (May 19, 2022): I see, thank you for your responses Kelvin. Really appreciate it and really loving CIPP :)
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/CIPP#487
No description provided.