Hello Solarwinds Team,
Audit logs are critical to our team's understanding with regards to who/when/what objects are being modified - especially when it comes to custom properties.
I've noticed inconsistencies across different objects and how they are handled from an audit logging perspective.
With the addition of the custom property editor, which is a great tool for modifying bulk properties, I've also noticed difference in behaviors across the editor, and default methods of updating a custom property.
I've tested and documented the different ways that the system responds by either make a change in the custom property editor, or modifying the custom property in the properties of the object (default method).
Below are the issues/current state that I've observed.
My question is: are these known issues, and if so, is there a current effort towards resolving these issues? This seems like core functionality that is missing.
Thank you in advance.
Custom Property Editor:
Functional:
Nodes: Audit logging notes both the specific custom property AND the value changed.
Volumes: Audit logging notes both the specific custom property AND the value changed.
Not Functional:
Applications: Audit logging not enabled for any changes made to application custom properties.
Transactions: Audit logging not enabled for any changes made to transaction custom properties.
Interfaces: Audit logging not enabled for any changes made to interface custom properties.
Alerts: Audit logging not enabled for any changes made to alert custom properties.
Groups: Audit logging not enabled for any changes made to group custom properties.
Setting custom properties through editing the object properties (default method):
Functional:
Nodes:
Audit logging notes both the specific custom property AND the value changed.
Volumes:
Audit logging notes both the specific custom property AND the value changed.
Not Functional:
Transactions:
No ability to update custom properties through the GUI, other than custom property editor.
Interfaces:
Audit logging not enabled for interface custom properties.
Applications:
Audit logging notes application was changed, but does not name the specific custom property, or the value that was updated.
Groups:
Audit logging notes group was changed, but does not name the specific custom property, or the value that was updated.
Alerts:
When a custom property is changed, the only audit type generated is ActionTypeID:61 - "Alert integration state for AlertID (The alertID) was set to 'Enabled' by X"
This seems to either be an error, or audit logging is not enabled for alert custom properties.
Thank you,
=SWQL
