Audit Conditions

Audit Conditions are applicable to various activities inside and outside of the SentryOne client. Audit Conditions provide a way to be notified when various settings are changed, or monitored objects are modified from within the SentryOne client. 

Note:  The Log to Database action is configured by default for all Audit Conditions. This gives you an audit trail concerning changes to your SentryOne environment. If you'd like to be notified about Audit Conditions happening in your environment, configure the Send Email Action.

Configuring Actions for Audit Conditions

Configure additional actions in response to Audit Conditions being met at these levelsshared groups (Global), site, computer group, computer, and connection. 

Select the node appropriate to the level you'd like to configure the action for in the Navigator pane, and then the Audit Actions tab in the Conditions pane. If you don't see the Conditions pane select View > Conditions.

Select Add found in the Conditions pane to open the Actions Selector window. Expand the applicable object and condition. Use the checkbox(es) to select which actions should be taken in response to this condition being met, and then select OK.

SentryOne Audit Actions Selector

For more information about actions that can be taken when a condition is met, see the Actions topic.

For a complete listing of all Audit Conditions, see the following tables.

Event Chain

ConditionDescription
Audit: Event Chain CreatedAn Event Chain is created.
Audit: Event Chain DeletedAn Event Chain is deleted.
Audit: Event Chain ModifiedAn Event Chain is modified.

Global

ConditionDescription
Audit: Actions ChangedA configured action is changed for an object.
Audit: Event Object CreatedAn Event Object (job, task, etc.) is created.
Audit: Event Object DeletedAn Event Object (job, task, etc.) is deleted.
Audit: Event Object Properties ModifiedAn Event Object's (job, task, etc.) properties are modified.
Audit: Event Object RescheduledAn Event Object (job, task, etc.) is rescheduled. For some object types, this condition is only detected when rescheduling in the SentryOne client by dragging-and-dropping.
Audit: Notes ChangedA note is changed.
Audit: Settings ChangedObject or application settings are changed.
Audit: Watched Flag ChangedThe watched flag is changed for an object.

Performance Counter

ConditionDescription
Audit: Performance Counter AddedA Performance Counter is added to an event object or event view.
Audit: Performance Counter DeletedA Performance Counter is deleted from an event object or event view.
Audit: Performance Monitored Flag ChangedThe Performance Monitored flag is changed for an event object or event view.