Manage Audit Logs

Audit Logs list end-user events like:

• Viewing and editing student profiles (and other types of profiles).
• Viewing, editing, signing, and printing documents. Document setup and status changes are audited as well.
• Accessing reports and modifying report definitions.
• Changes to security roles and permissions.
• Changes to system configuration.

Review Audit Logs

Sign in as a security administrator.

1. Choose Administration, then Security.

2. Click Audit Log. The Audit Log lists all events or tasks performed by all users. Significant events are highlighted.

3. To view events based on type, severity, location, user ID, and IP Address, click Filter and select the required filter. To create a filter, click New Filter.

4. To view or modify auto-partitioning settings, click More, then Audit Log Settings.

   

   20.6 and later.
   If you are hosted by PowerSchool, the partitioning system retains a minimum of four years of audit log history. If you are on-premise, select the minimum number of years to store the audit log history. Refer to Manage Audit Logs for more information.

5. To view events for a specific date, click the calendar icon for Select Date and select the date.
6. To view logs for a specific period, select the required period from the # Days to Include. You can view events for up to 31 days to the date set.
7. To search for events by keyword, type within the Search text field.
8. Click Search.

To print the results, click the Print icon. To download the results as an Excel spreadsheet, click the Export to Excel icon.

Review Audit Logs for Individual User

To review audit logs for an individual user:

1. Choose Search, then Staff.
2. Use the Staff - Quick Search Form to search for staff by ID, Last Name, or First Name.
3. Click Search.
4. Click the profile icon of the required staff member.
5. Click More.

6. Click View Audit Log. The Audit Log lists all events or tasks performed by the user. Significant events are highlighted.

7. To view events that affect the individual user, click Events Affecting Staff Profile. To view events performed by the particular user, click Events by Staff User.
8. To view events for a specific date, click the calendar icon for Select Date and select the date.
9. To view logs for a specific period, from the # Days to Include, select the required period. You can view events for up to 500 days to the date set.

Manage Filters

Audit log filters allow you to select events based on the type, severity, location, user ID, and IP address.

Sign in as a security administrator to create a new filter.

1. Choose Administration, then Security.
2. Click Audit Log.
3. Click New Filter.
4. Within Audit Log Filter Properties, enter a Unique Filter Name, then choose the Event Category Filter.
5. Select Critical (Red) Events Only if you want the log to list only significant events.
6. Choose Location Filter.
7. Choose User ID Filter.
8. Choose IP Address Filter.
9. Specify a Text Search Word/Phrase.

10. From Email Alerts, choose the frequency of email notifications you want to receive. Select Alert me if no events occur in this filter to be notified when the filter does not have any events for a specified period.

    

    PowerSchool recommends setting the frequency of Email Alerts and selecting Alert me if no events occur in this filter when you want to monitor recurring events like nightly data imports or a daily backup.

11. Click Accept.

To review events from a specific filter, refer to Manage Audit Logs.

Manage Auto-Partitioning

20.6 and later.

New audit log partitions will be automatically created after the End-Of-Year rollover. Each partition is defined by a cut-off date, and all events before the cut-off date will move into the preceding partition. To view a partition, from Audit Log Archive, choose the partition.

Sign in as a security administrator or consultant.

1. Choose Administration, then Security.
2. Choose Audit Log.

3. Click More, then Audit Log Settings.

   

   If you are hosted by PowerSchool, the partitioning system retains a minimum of four years of audit log history. If you are on-premise, select the minimum number of years to store the audit log history.

4. Specify the Maximum Years To Retain In Archive Partitions.
5. Specify the Minimum Months To Retain In Primary Audit Log.
6. Click OK.