Audit Trail report does not show LOW severity events

Last post 08-22-2017, 4:18 AM by Michal_Mikulik. 3 replies.
Sort Posts: Previous Next
  • Audit Trail report does not show LOW severity events
    Posted: 06-23-2017, 9:10 AM


    11 SP7.

    When I run Audit Trail report (from both Commcell console and WebConsole), it does not show LOW sev events. When I set HIGH Playback Level, it shows CRITICAL+HIGH severity events, etc., but when I define LOW playback level, it show MEDIUM events and above only.

    I also tested different Web Explorers, it is the same.

    (I am especially interested in Restores, which should be between LOW events.)



  • Re: Audit Trail report does not show LOW severity events
    Posted: 08-09-2017, 8:04 AM


    does anybody have an idea? After upgrade to SP8, it is the same.

    I also tested this also in another CommCell and when I run report with Playback Level = Low, it displays only High events -- Critical probably havent happened yet (CommCell is running 1 week), but Low/Medium events 100% happened (Logins/Logout,Restores, etc.).

    Retention of audit trail records is set to default, so 120 days for Low events.



  • Re: Audit Trail report does not show LOW severity events
    Posted: 08-12-2017, 1:00 AM

    I verified in a lab setup that the audit trail report works on SP8 with medium severity events. I would recommend that you open a TR with support and upload your CommServe database so this issue can be investigated further.

  • Re: Audit Trail report does not show LOW severity events
    Posted: 08-22-2017, 4:18 AM


    this was a false alarm. There are no so many LOW severity events, and when I performed some of them explicitly, they are displayed in the report.

    Actually between these events, also "Restore Process" type of event is documented, but it is not logged to audit trail by restores. Thats the question what is it. But we can review history of restores also in Data Recovery Jobs history, after extending its retention. So it is a suitable workaround.


The content of the forums, threads and posts reflects the thoughts and opinions of each author, and does not represent the thoughts, opinions, plans or strategies of Commvault Systems, Inc. ("Commvault") and Commvault undertakes no obligation to update, correct or modify any statements made in this forum. Any and all third party links, statements, comments, or feedback posted to, or otherwise provided by this forum, thread or post are not affiliated with, nor endorsed by, Commvault.
Commvault, Commvault and logo, the “CV” logo, Commvault Systems, Solving Forward, SIM, Singular Information Management, Simpana, Commvault Galaxy, Unified Data Management, QiNetix, Quick Recovery, QR, CommNet, GridStor, Vault Tracker, InnerVault, QuickSnap, QSnap, Recovery Director, CommServe, CommCell, SnapProtect, ROMS, and CommValue, are trademarks or registered trademarks of Commvault Systems, Inc. All other third party brands, products, service names, trademarks, or registered service marks are the property of and used to identify the products or services of their respective owners. All specifications are subject to change without notice.
Copyright © 2018 Commvault | All Rights Reserved. | Legal | Privacy Policy