Download Security Logs for All Users

Download security logs for all users as a CSV file.

Plan Availability:

Download Security Logs for All Users

Download the security logs for all users in your ProcessMaker Platform instance. Security logs prepared for download remain available for 24 hours. Thereafter, the security logs must be compiled again.

ISO/IEC 27001 is an excellent standard for information security management systems (ISMS). An organization complying with ISO/IEC 27001 has put in place a system to better manage risks related to the security of data owned or handled by that organization. In compliance with ISO/IEC 27001, ProcessMaker Platform logs multiple aspects of each user's activity throughout the platform.

In the Security Logs tab within each user account, ProcessMaker Platform maintains a record of the datetime, and IP address for the following activities that user performs:

• Log on: Each successful and unsuccessful log on attempt

• Log off: Each log off from ProcessMaker Platform

• User profile changes: Any changes to that user's profile, including:

  • profile information

  • group memberships

  • permissions

  • API tokens, including creation, update, and deletion

• Collections: Reading, creating, updating, and deleting any Collection or Collection record

• Settings: Changing settings, including:

  • Create or revise any email server or changes in their configuration options (including IMAP)

  • Enable new SSO options or change configuration options

  • Enable or change configuration options to other systems, such as DocuSign and IDP

  • Enable LDAP or SCIM or change their configuration options

  • Enable or disable User Signals

  • Update User Extended Properties or change their designated time zone

• Customize UI: Changes within the Customize UI menu (inputs to change setting values, including deletions)

• System messages: System alerts and errors (including within Requests)

• Other user activities: Other user activities in the platform, including:

  • Create, update, publish, archive, or unarchive a Process

  • Create, update, or delete any Designer asset, including Process Templates, Screens, Scripts, Environment Variable, Data Connector, PM Blocks, Decision Tables, or Vocabularies

  • Create, update, or delete any non-Designer assets, including Saved Searches, Saved Search Charts, auth client, Script Executors, Dynamic UI dashboards or menus, or Translations

  • Perform global or local search queries

  • Access, reassignments, retries, rollbacks, and completion of Tasks, including parent Request ID

  • Start, cancel, and complete Requests

  • Access Queue Management/Laravel Horizon by section name

  • Create a user or group

See Security Log Events for a description of each user activity event.

Permissions

Your user account or group membership must have the following permissions to download security logs for all users unless your user account has the Make this user a Super Admin setting selected:

• Users: View Users

• Security Logs: View Security Logs

See the Users permissions and the Security Logs permission, or ask your Administrator for assistance.

Follow these steps to download security logs for all users:

1. View all user accounts. The Users tab displays.

2. Click the Logs button. ProcessMaker Platform compiles the security logs from your your AWS S3 bucket in the background. You may continue working as necessary in ProcessMaker Platform. The following message displays from the currently displaying page when the security logs are ready to download: Click on the link and download the file. This link is available for 24 hours.

3. Click the Download link. The security logs download in CSV format.

Security Log Events

View these security log event labels when:

• Downloading security logs for all users

• Viewing all activities for a user

• Viewing information about a security log for a user

• Downloading the security logs for a user

• Sorting the security logs for a user

• Searching the security logs for a user

Event Label	Event Description
ActivityReassignment	Reassign a task
AnalyticReportCreated	Create an analytic report
AnalyticReportDeleted	Delete an analytic report
AnalyticReportUpdated	Configure an analytic report
AuthClientCreated	Create an Authenticated Client
AuthClientDeleted	Delete an Authenticated Client
AuthClientUpdated	Edit an Authenticated Client
CategoryCreated	Create a Process Category
CategoryDeleted	Delete a Process Category
CategoryUpdated	Edit a Process Category
CollectionAccessed	View all records in a Collection
CollectionCreated	Create a Collection
CollectionDeleted	Delete a Collection
CollectionRecordAccessed	View a Collection record
CollectionUpdated	Configure a Collection
CustomizeUiUpdated	Customize site design
DashboardCreated	Create a Dashboard
DashboardDeleted	Delete a Dashboard
DashboardUpdated	Edit a Dashboard
DataConnectorCreated	Create a Data Connector
DataConnectorDeleted	Delete a Data Connector
DataConnectorResourceAction	Add, edit, or delete a resource from a Data Connector
DataConnectorUpdated	Edit Configuration for a Data Connector's REST Data Source or Edit Configuration for a Data Connector's SOAP Data Source
DecisionTableCategoryCreated	Create a Decision Table category
DecisionTableCategoryDeleted	Delete a Decision Table category
DecisionTableCategoryUpdated	Edit a Decision Table category
DecisionTableCreated	Create a Decision Table
DecisionTableDeleted	Delete a Decision Table
DecisionTableUpdated	Edit a Decision Table
EmailServerCreated	Create an Email Server Configuration
EmailServerDeleted	Delete an Email Server Configuration
EnvironmentVariablesCreated	Create an Environment Variable
EnvironmentVariablesDeleted	Delete an Environment Variable
EnvironmentVariablesUpdated	Edit an Environmental Variable
FilesAccessed	Preview a File from File Manager
FilesCreated	Add a File to the Public Folder
FilesDownloaded	Download a File from File Manager
FilesUpdated	Rename a File in the Public Folder
FolderAccessed	View All Files in the Public Folder
FolderCreated	Create a Folder in the Public Folder
FolderDownloaded	Download the Contents of a Folder from File Manager
FolderUpdated	Rename a Folder in the Public Folder
GroupCreated	Create a Group
GroupDeleted	Delete a Group
GroupUpdated	Edit Group Settings
GroupUsersUpdated	Manage Group Members
Login	Each successful and unsuccessful log on attempt
Logout	Each log off from ProcessMaker Platform
MenuCreated	Create a Menu
MenuDeleted	Delete a Menu
MenuUpdated	Edit a Menu
PermissionUpdated	Edit user or group permissions
PmBlockArchived	Archive a PM Block
PmBlockCreated	Create a New PM Block
PmBlockUpdated	Configure a PM Block or Edit a PM Block
ProcessArchived	Archive a Process
ProcessCreated	Create a Process
ProcessUpdated	Configure a Process
QueueManagementAccessed	Queue Management
RecordCreated	Create a Collection Record
RecordDeleted	Delete a Collection Record
RecordUpdated	Edit a Collection Record
RequestAction	Create, Cancel, or Complete a Request
RequestError	When a Request has errors
SavedSearchChartCreated	Create a Saved Search Chart
SavedSearchChartDeleted	Delete a Saved Search Chart
SavedSearchChartUpdated	Edit a Saved Search Chart
SavedSearchCreated	Create and Share a Saved Search
SavedSearchDeleted	Delete a Saved Search
SavedSearchRecounted	Manage Your Own Saved Searches
SavedSearchUpdated	Configure a Saved Search
ScreenCreated	Create a Screen
ScreenDeleted	Delete a Screen
ScreenUpdated	Configure or edit a Screen
ScriptCreated	Create a Script
ScriptDeleted	Delete a Script
ScriptExecutorCreated	Edit a Script Executor
ScriptExecutorDeleted	Create a Script Executor
ScriptExecutorUpdated	Edit a Script Executor
ScriptUpdated	Configure or edit a Script
SettingsUpdated	Edit Settings.
SignalCreated	Create a Signal
SignalDeleted	Delete a Signal
SignalUpdated	Edit a Signal
TemplateCreated	Import and Configure a Process Template
TemplateDeleted	Delete a Process Template
TemplatePublished	Create a Template from a Process
TemplateUpdated	Edit or configure a Process Template
TokenCreated	Generate an API Token
TokenDeleted	Delete an API Token
TranslationReseted	Reset All User Interface Labels and Messages to Their Defaults
TranslationUpdated	Edit Text that Displays in the User Interface
UnauthorizedAccessAttempt	URLs that are not allowed to access
UserCreated	Create a user account
UserDeleted	Delete a user account
UserGroupsUpdated	Edit to Which Groups the User is a Member
UserRestored	Restore a Deleted User Account
UserUpdated	Edit a user account
VocabularyCreated	Create a Vocabulary
VocabularyDeleted	Delete a Vocabulary
VocabularyUpdated	Edit a Vocabulary
WebEntryAccessed	Start a Request through the Web Entry URL