Skip to content

Logs

The Logs page keeps a record of sign-ins and of the administration actions performed in Avalon. It is restricted to administrators.

Event types

The Log type column tells two families apart.

AUTH

  • User sign-in, local or LDAP.
  • Sign-out through the log out button.
  • Session ended by inactivity, timestamped at the last activity rather than at detection.

ADMIN

Any action that changes the configuration from the Administration section: creating, updating, deleting, revoking an API key. This covers tenants, users, roles, LDAP mappings, API keys, device types, service accounts, the LDAP configuration, the global settings (SMTP, login banner, media colors) and the backup configurations.

Refused attempts are recorded, marked as failed.

What is not recorded

  • Reads: opening a screen, listing devices or exporting a report.
  • Connection tests: the Test SMTP and Test connection (LDAP) buttons.
  • Form contents: only the name of the object involved is recorded. No password, API token or LDAP bind account appears in the journal.

Reading a line

Lines are written out in plain words:

avalon-ldap created "Catalyst 9300" in Device types.
avalon-ldap updated the group mappings of "Avalon1" in LDAP.
avalon-ldap revoked "ci-runner" in API Keys.
avalon-ldap failed to delete "Acme" in Tenants.

The author of the action is highlighted. If they have been renamed since, the line shows the former name followed by the current one; if they have been deleted, it says so.

The name shown is the one at the time of the action

An object is identified by the name it carried when the action took place. Renaming a device type therefore leaves earlier lines unchanged, still showing its former name.

Filtering and exporting

Filters sit under the column headers.

  • Type and Action: multiple selection.
  • Timestamp: From and To bounds, both optional. The upper bound covers the whole day.

The Refresh button reloads the page, keeping filters and sorting in place.

To export, tick the rows you want then click Export. An Excel file is downloaded. The button stays disabled until at least one row is selected.

Retention

By default, logs are kept indefinitely.

To purge them, use the RemoveFiles service, also used for configuration backups and device logs. Select the Avalon logs file type, set a retention period and schedule the service.

The purge runs as a transaction, visible in the Transactions screen, and reports how many entries were removed.

Export before purging

Removed entries cannot be recovered. If your retention policy is longer than the one applied, export beforehand.