Audit trails¶

The audit trails service records the events that could have changed the system. It includes the committed configurations, the called RPCs, and the connections to the device.

By default, this functionality is disabled.

To activate it, run the following command:

vsr running config# / system audit-trail enabled true
vsr running alarm# commit
Configuration committed.

The audit trails can then be displayed with the following command:

vsr running config# show audit-trails
type    date                                            user     resources                                         error
====    ====                                            ====     =========                                         =====
session 2024-05-31 18:50:31 -                           admin
rpc     2024-05-31 18:50:28.592485                      admin    /vrouter-alarm:purge-alarm(alarm-clearance-status
                                                                 =any)
commit  2024-05-31 18:50:27.267083                      admin    loopback
commit  2024-05-31 18:50:25.838321                      admin    audit-trail, auth
session 2024-05-31 18:48:08 - 2024-05-31T18:49:08+02:00 admin
session 2023-12-11 20:25:37 - 2023-12-11T20:25:37+01:00 admin