Enterprise 11: Audit events list

Review the list of audit events to identify the type of audit entries that are logged in the Control Room.

List of audit events

The following table shows the list of Audit entries with their description:
Audit entries Description
AD group mapping created This action is logged when the user creates an AD Role Mapping
AD group mapping deleted This action is logged when the user deletes an AD Role Mapping
AD group mapping updated This action is logged when the user updates an AD Role Mapping
AD sync conflict role This action is logged when the user roles cannot be synched due to conflict roles
AD sync empty role This action is logged when the user roles cannot be synched with empty roles
AD sync role system assigned This action is logged when new AD roles are assigned with sync operations
AD sync role system deleted This action is logged when AD roles are deleted with sync operations
AD sync role system updated Not applicable
Activate automation This action is logged when the user activates the Schedule
Add MFA token This action is logged when the user configures an MFA token.
Add Manual Dependency This action is logged when the user adds Manual Dependency to a bot
Add credential This action is logged when the user performs the Create Credential operation
Add locker This action is logged when the user performs the Create Locker operation.
Allocate License This action is logged when the user creates a user with a particular license (such as Bot Creator or Bot Runner) and when the user changes the license from Bot Creator to Bot Runner and vice versa.
Audit error Not applicable
Audit migration finished This action is logged when migration is completed
Audit migration started This action is logged when migration is started
BI Add User Dashboard BI is not enabled to log the audit entries in 11.x
BI Copy Dashboard BI is not enabled to log the audit entries in 11.x
BI Delete Dashboard BI is not enabled to log the audit entries in 11.x
BI Delete User Dashboard BI is not enabled to log the audit entries in 11.x
BI End Task BI is not enabled to log the audit entries in 11.x
BI Get Task Data BI is not enabled to log the audit entries in 11.x
BI Get User Dashboards BI is not enabled to log the audit entries in 11.x
BI Operations BI is not enabled to log the audit entries in 11.x
BI Register Dashboard BI is not enabled to log the audit entries in 11.x
BI Run Data BI is not enabled to log the audit entries in 11.x
BI Save Dashboard BI is not enabled to log the audit entries in 11.x
BI Search Dashboard BI is not enabled to log the audit entries in 11.x
BI Start Task BI is not enabled to log the audit entries in 11.x
BI Update Dashboard BI is not enabled to log the audit entries in 11.x
Bot Runner Session This action is logged when the bot is deployed with the Bot Runner Session check
Bot Runner Session Continued This action is logged when the bots are deployed back-to-back on the same machine with the Bot Runner Session check.
Bot Runner Session Released This action is logged when the bot is deployed with the Bot Runner Session check, the check is completed, and the RDP session is closed
Bot Store - Download bots finished This action is logged when the user clicks the download option on the Bot Store - My Downloads page and the process to download the bots in the Control Room repository finishes
Bot Store - Download bots started This action is logged when the user clicks the download option on the Bot Store - My Downloads page and the process to download the bots in the Control Room repository starts
Bot Store - Login This action is logged when the user logs in to the Bot Store with valid credentials
Callback Request This action is logged when the bot is deployed with the API Input Variables and Callback URL
Change database password This action is logged when the user changes the password (successfully or unsuccessfully) from the Settings page
Change settings This action is logged when the user changes any setting such as On to Off or Off to On
Checkout This action is logged when VCS is enabled and the bot is checked out for editing in the Enterprise Client
Client log in This action is logged when the user logs in to the Enterprise Client
Create Credential Vault Not applicable
Connect Credential Vault This action is logged in case the machine reboots or the following Automation Anywhere Control Room Service restarts when the user connects to the credential after configuration:
  • Automation Anywhere Control Room Caching
  • Automation Anywhere Control Room Service
Create Domain Not applicable
Create WorkItem This action is logged when new work items are added to a queue
Create automation This action is logged when the user creates a new schedule or runs a bot with a queue in workload management.
Create draft of queue This action is logged when the user saves the work item as draft in workload management.
Create folder This action is logged when the user creates a new folder
Create learning instance This action is logged when the user creates a new learning instance in IQ Bot
Create queue This action is logged when the user creates a new queue in workload management.
Create queue failed This action is logged when a queue creation fails
Create role This action is logged when the user creates a new role
Create user This action is logged when a new user is created
Create workItem failed This action is logged when the user fails to create work items
Deactivate automation This action is logged when the scheduled automation is deactivated
Delete MFA token This action is logged when the logged-in user deletes the MFA token from the user profile
Delete WorkItem This action is logged when the user deletes the work item from the queue
Delete automation This action is logged when the user deletes the schedule
Delete bot This action is logged when the user performs the delete bot action from the Control Room
Delete credential This action is logged when the user performs the Delete Credential operation.
Delete file This action is logged when the user deletes a file from the Control Room (for example, deleting a file from the My Scripts folder)
Delete folder This action is logged when the user deletes a folder from the Control Room
Delete learning instance This action is logged when the user deletes an existing learning instance
Delete locker This action is logged when the user deletes a locker
Delete queue This action is logged when the user deletes the queue in workload management.
Delete queue failed This action is logged when the user fails to delete a queue
Delete role This action is logged when the user deletes roles from the system
Delete user This action is logged when the user delete users from the system
Delete workItem failed This action is logged when the user fails to delete work items in a queue
Device pool created This action is logged when the user creates a new device pool
Device pool creation failed This action is logged when the user fails to create a device pool
Device pool deleted This action is logged when the user deletes a device pool
Device pool deletion failed This action is logged when the user fails to delete a device pool.
Device pool update failed This action is logged when the user is not able to edit an existing device pool (for example, add a new device or add a new customer role)
Device pool updated This action is logged when the user edits an existing device pool (for example, add a new device or add a new customer role
Disable user This action is logged when the user disables another user in the system
Domain credential reset This action is logged when the user resets or reconnects to the AD domain from the settings page.
Download bot This action is logged when the user downloads a bot from the Server Repository to Client Repository
Download file This action is logged when the user downloads a file from the Server Repository to Client Repository (for example, the user downloads a file to Client Repository from the My Scripts folder)
Email Notification This action is logged when email notification connection or authentication fails
Email Notification Verification Link Not applicable
Edit domain Not applicable
Edit Role This action is logged when the user modifies a role
Edit User This action is logged when the user modifies another user
Edit bot This action is logged when the user edits a bot when VCS is enabled to change the Production Version
Edit learning instance This action is logged when the user edits any of the following settings of an existing learning instance:
  • Edits the name
  • Edits or adds a description
  • Uploads staging documents
  • Adds new fields
  • Edits new group setting
  • Edits default validations groups setting
Elasticsearch Backup This action is logged when the user provides a backup IP address in the Elasticsearch disaster recovery backup cluster
Enable user This action is logged when the user enables another user in the system
Export bots This action is logged when the user exports the bot package using Export Bot functionality from the Control Room
Export Domain This action is logged when the user exports any of the domains from the IQ Bot application
Export learning instance This action is logged when the user exports a learning instance (.iqba file) through the migration utility
Export queues This action is logged when the user exports workload management queues.
Export roles This action is logged when the user exports roles
Hide domain This action is logged when the user hides a domain
Import bots The action is logged when the user imports the bot package using Import Bot functionality from the Control Room
Import learning instance This action is logged when the user imports a learning instance (.iqba file) through the migration utility
Import queues This action is logged when the user imports workload management queues.
Import Domain This action is logged when the user imports any new domains to the IQ Bot application
Import roles This action is logged when the user imports roles
Install License This action is logged when the user installs or changes the license from the license page
Load work items from file This action is logged when the user selects a CSV or Excel file and uploads the work item in a queue
Migration finished This action is logged when the migration of the bots from 10.x to 11.x version finishes
Migration started This action is logged when the user starts the migrates process to migrate the bots from 10.x to 11.x version
Move Automation To History This action is logged when the user moves automation to history
Package Creation This action is logged when the user deploys the bot and a package (atmx file) is generated
Read Credential This action is logged when the logged-in user accesses the credentials of another user that they do have permission for because the user is not a consumer for the credential or a credential owner.
Read Locker This action is logged when the logged-in user accesses the locker of another user which they do not have permission for because they are not part of a locker as a member (owner, manager, participant, or consumer)
Register app This action is logged when the user configures IQ Bot
Release License This action is logged when the user changes the license from Bot Runner to Bot Creator or Admin
Remove Manual Dependency This action is logged when the manual dependency is removed from a bot
Rename Folder This action is logged when the user renames the folder
Reset Password This action is logged when the user resets the password
Run Bot (Local Client) finished This action is logged when bot execution is completed for a bot run initiated from the Enterprise Client
Run Bot (Local Client) paused This action is logged when bot execution is paused for a bot run initiated from the Enterprise Client
Run Bot (Local Client) resumed This action is logged when bot execution is resumed for a bot run initiated from Enterprise Client
Run Bot (Local Client) started This action is logged when bot execution is started for a bot run initiated from the Enterprise Client
Run Bot (Local Client) stopped This action is logged when bot execution is stopped for a bot run initiated from the Enterprise Client
Run Bot (Local Client) suspended This action is logged when bot execution is suspended for a bot run initiated from the Enterprise Client due to other high priority tasks in the queue
Run Bot (Local Command Line) finished This action is logged when bot execution is completed for a bot run initiated through the command line from the Enterprise Client
Run Bot (Local Command Line) paused This action is logged when bot execution is paused for a bot run initiated through the command line from the Enterprise Client
Run Bot (Local Command Line) resumed This action is logged when bot execution is resumed for a bot run initiated through the command line from the Enterprise Client
Run Bot (Local Command Line) started This action is logged when bot execution is started for a bot run initiated through the command line argument from the Enterprise Client
Run Bot (Local Command Line) stopped This action is logged when bot execution is stopped for a bot run initiated through the command line from the Enterprise Client
Run Bot (Local Command Line) suspended This action is logged when bot execution is suspended for a bot run initiated through the command line from the Enterprise Client due to other high priority tasks in the queue
Run Bot (Local Hotkey) finished This action is logged when bot execution is completed for a bot run initiated through Hot Key from the Enterprise Client
Run Bot (Local Hotkey) paused This action is logged when bot execution is paused for a bot run initiated through Hot Key from the Enterprise Client
Run Bot (Local Hotkey) resumed This action is logged when bot execution is resumed for a bot run initiated through Hot Key from the Enterprise Client
Run Bot (Local Hotkey) started This action is logged when bot execution is started for a bot run initiated through Hot Key from the Enterprise Client
Run Bot (Local Hotkey) stopped This action is logged when bot execution is stopped for a bot run initiated through Hot Key from the Enterprise Client
Run Bot (Local Hotkey) suspended This action is logged when bot execution is suspended for a bot run initiated through Hot Key from Enterprise Client due to other high priority tasks in the queue
Run Bot (Local Schedule) finished This action is logged when bot execution is completed for a bot schedule initiated from the Enterprise Client
Run Bot (Local Schedule) paused This action is logged when bot execution is paused for a bot schedule initiated from the Enterprise Client
Run Bot (Local Schedule) resumed This action is logged when bot execution is resumed for a bot schedule initiated from the Enterprise Client
Run Bot (Local Schedule) started This action is logged when bot execution is started for a bot schedule initiated from the Enterprise Client
Run Bot (Local Schedule) stopped This action is logged when bot execution is stopped for a bot schedule initiated from the Enterprise Client
Run Bot (Local Schedule) suspended This action is logged when bot execution is suspended for a bot schedule initiated from the Enterprise Client due to other high priority tasks in the queue
Run Bot (Local Trigger) finished This action is logged when bot execution is completed for a bot trigger initiated from the Enterprise Client
Run Bot (Local Trigger) paused This action is logged when bot execution is paused for a bot trigger initiated from the Enterprise Client
Run Bot (Local Trigger) resumed This action is logged when bot execution is resumed for a bot trigger initiated from the Enterprise Client
Run Bot (Local Trigger) started This action is logged when bot execution is started for a bot trigger initiated from the Enterprise Client
Run Bot (Local Trigger) stopped This action is logged when bot execution is stopped for a bot trigger initiated from the Enterprise Client
Run Bot (Local Trigger) suspended This action is logged when the bot execution is suspended for a bot trigger initiated from the Enterprise Client due to other high priority tasks in the queue
Run Workflow (Local Client) finished This action is logged when the workflow execution is completed for a workflow run initiated from the Enterprise Client
Run Workflow (Local Client) started This action is logged when the workflow execution is paused for a workflow run initiated from the Enterprise Client
Run Workflow (Local Schedule) finished This action is logged when the workflow execution is completed for a workflow schedule initiated from the Enterprise Client
Run Workflow (Local Schedule) started This action is logged when the workflow execution is paused for a workflow schedule initiated from the Enterprise Client
Run Workflow (Local Trigger) finished This action is logged when the workflow execution is finished for workflow trigger initiated from AAE Client
Run Workflow (Local Trigger) started This action is logged when the workflow execution is paused for workflow trigger initiated from AAE Client
Run bot Deployed This action is logged when a bot is deployed
Run bot disconnected This action is logged when a bot is deployed with Bot Runner Session as true and the connection between Control Room and Bot Runner fails when the bot execution is in progress
Run bot finished This action is logged when the bot execution is complete
Run bot paused This action is logged when the user pauses the bot execution from the In-Progress activity page
Run bot reconnected This action is logged when the bot is deployed with Bot Runner Session as true and the connection between Control Room and Bot Runner is reconnected
Run bot resumed This action is logged when the user resumes the bot execution from the In-Progress activity page
Run bot stopped This action is logged when the user stops the bot execution from the In-Progress activity page
Send Email This action is logged when an email is sent on authentication failure
Send bot to production This action is logged when trained bots are sent to production
Send bot to staging This action is logged when bots are sent back to staging from production for training
SAML configuration updated This action is logged when there is an update in the SAML configuration
Schedule misfired This action is logged when the Control Room services starts or the server is available after more than 15 minutes of scheduled deployment time

All the schedules that were not deployed when the server was down is shown as a Misfired entry.
Send learning instance to production This action is logged when the user moves the learning instance from staging to production
Send learning instance to staging This action is logged when the user moves the learning instance from production to staging
Train bot This action is logged when the user creates a bot for a group or edits an existing bot and saves the training successfully, or when the user saves the bot (training) and sends the bot to production
Transfer Credential Ownership This action is displayed when the locker admin transfers the ownership of the credentials
Undo checkout This action is logged when the user performs an Undo Checkout operation on the checked-out bot from Enterprise Client when SVN is enabled
Unlock bot This action is logged when any checked-out bot is unlocked from the Control Room when VCS is ON
Unlock Credential Vault Not applicable
Unlock file This action is logged when any checked-out file (for example, file in My Docs) is unlocked from the Control Room when VCS is ON
Unset Activity type Not applicable
Update Automation This action is logged when the user edits the schedule automation
Update Credential This action is logged when the user modifies the credentials
Update Locker This action is logged when the user modifies the lockers
Update MFA Role This action is logged when the user edits the role for which MFA is enabled
Update MFA Token This action is logged when the admin user updates the MFA token detail on the Edit user page
Update MFA User This action is logged when the admin user updates the MFA token Disable 2FA until date on the Edit user page
Update Settings This action is logged when the user updates the settings
Update WorkItem This action is logged when the user edits the work item
Update app registration This action is logged when the IQ Bot URL is updated in the settings page
Update queue This action is logged when the user updates the existing queue (for example, adding new work items to the same queue)
Update queue failed This action is logged when the user fails to update the existing queue (for example, adding new work items to the same queue)
Update workItem failed This action is logged when the work items fail to update
Upload bot This action is logged when the user uploads the bot from the Enterprise Client to the Control Room server repository
Upload file This action is logged when the user uploads the file to the My Docs folder from the Enterprise Client to the Control Room server repository
Upload work items file This action is logged when the user updates the queue and adds the work items
User log in This action is logged when the user logs in to the Control Room
User log out This action is logged when the user logs out of the Control Room
User multiple log in This action is logged when the user logs in to the Control Room from different browsers with the same username
Validate learning instance This action is logged when the user validates (either corrects the document and saves it or invalidates the document) a document in the validator of a learning instance