[GH-ISSUE #158] Audit logging for all script, patch, and check runs #91

Closed
opened 2026-03-02 02:13:29 +03:00 by kerem · 3 comments
Owner

Originally created by @meyerje on GitHub (Oct 30, 2020).
Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/158

Originally assigned to: @sadnub on GitHub.

When you start getting hundreds of endpoints there is a necessity for seeing execution results from the patching, scripting, and check tasks that get executed. Could a page be built that shows a log of all these allowing you to drill into bulk and/or policy executed operations to see the multiple results. I'd also want to single single execution results too. The results should be sortable by column, filterable by status (maybe site as well), and definitely drillable when done in bulk.

Ultimately what I'm looking for is a way to efficiently review actions on scripts, tasks, and patching both in mass and on single execution runs. Regardless, thank you for the efforts and work you've all put in!

Originally created by @meyerje on GitHub (Oct 30, 2020). Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/158 Originally assigned to: @sadnub on GitHub. When you start getting hundreds of endpoints there is a necessity for seeing execution results from the patching, scripting, and check tasks that get executed. Could a page be built that shows a log of all these allowing you to drill into bulk and/or policy executed operations to see the multiple results. I'd also want to single single execution results too. The results should be sortable by column, filterable by status (maybe site as well), and definitely drillable when done in bulk. Ultimately what I'm looking for is a way to efficiently review actions on scripts, tasks, and patching both in mass and on single execution runs. Regardless, thank you for the efforts and work you've all put in!
kerem 2026-03-02 02:13:29 +03:00
Author
Owner

@sadnub commented on GitHub (Oct 30, 2020):

@meyerje All of that data except patching are captured in Audit Logging currently. The check runs will show up as a Check Object edit though. I could create another action that says Check Run to make it more clear. I also think being able to filter by action, site and client would be beneficial. Does that sound good?

You can also see bulk actions for automation policies by clicking on the status of the policy, but you can only see that at a per policy level. There really isn't a good way to see patching statuses in bulk at the moment. There will eventually be a dashboard to see status' of various things. The patching would definitely be on there.

In the meantime, we could create custom filters for the agent table that will include only agents that are missing patches, patches pending, failed checks, online, offline, etc.

Let me know what you think

<!-- gh-comment-id:719532209 --> @sadnub commented on GitHub (Oct 30, 2020): @meyerje All of that data except patching are captured in Audit Logging currently. The check runs will show up as a Check Object edit though. I could create another action that says Check Run to make it more clear. I also think being able to filter by action, site and client would be beneficial. Does that sound good? You can also see bulk actions for automation policies by clicking on the status of the policy, but you can only see that at a per policy level. There really isn't a good way to see patching statuses in bulk at the moment. There will eventually be a dashboard to see status' of various things. The patching would definitely be on there. In the meantime, we could create custom filters for the agent table that will include only agents that are missing patches, patches pending, failed checks, online, offline, etc. Let me know what you think
Author
Owner

@meyerje commented on GitHub (Oct 30, 2020):

Yea these sound great. Having one place we can check all of these results easily is important once you get the endpoint count up there.

<!-- gh-comment-id:719577406 --> @meyerje commented on GitHub (Oct 30, 2020): Yea these sound great. Having one place we can check all of these results easily is important once you get the endpoint count up there.
Author
Owner

@sadnub commented on GitHub (Nov 11, 2020):

@meyerje I created a PR that adds the ability to filter more fields in the audit manager. I also added Check Run, Task Run, Bulk Action, and Agent Install entries. This will be in the next release and let me know if anything needs to be added or modified.

Also the ability to filter the agent table has been added. You can filter by failing checks, missing patches, and reboot pending as well as whether or not the agent is online.

<!-- gh-comment-id:725578644 --> @sadnub commented on GitHub (Nov 11, 2020): @meyerje I created a PR that adds the ability to filter more fields in the audit manager. I also added Check Run, Task Run, Bulk Action, and Agent Install entries. This will be in the next release and let me know if anything needs to be added or modified. Also the ability to filter the agent table has been added. You can filter by failing checks, missing patches, and reboot pending as well as whether or not the agent is online.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/tacticalrmm#91
No description provided.