Audit Log Search

Audit Log records are user actions within NDR, providing a detailed history of activities for security and compliance purposes. Audit Log Search allows you to search these records to track specific actions, users, or events.

Logs are stored in the database for one year and are automatically deleted afterward.

Search Fields

Field Name	Details
From	Time to search from
To	Time to search to
User	User that performed the action
Target	Resource/entity that was modified
Action	Action done on the resource/entity

Search examples

Example 1 - search for notification rules created in the last 24 hours

Search criteria: Select time window 24h back. Set Target=NOTIFRULE. Set Action=INSERT.

Example 2 - search for any MS365 Integration config modifications by John in the last week

Search criteria: Select time window 1 week back. Set User=John. Set Target=MS365_INTEGRATION.