Change tracking
Preview
This page describes how to use the Change Tracking feature, an essential tool for administrators to monitor and record changes within their network environment.
Change Tracking is a key feature in managing networks and computers. It keeps a detailed record of any changes made to a computer's setup, like hardware updates, new software installations, or changes in system settings. This is important for a few reasons:
-
It helps spot any unexpected or unauthorized changes that could mean a security issue.
-
It makes troubleshooting easier by showing what changed and when.
-
It helps make sure everything complies with company policies and external rules.
Users will find all these details in the Inventory section, under the Change history tab of a computer's detailed information (see Change history tab for details).
Configuring change tracking
To activate the change tracking feature, enable change tracking in the Admin Center and configure which changes you want tracked.
To enable and configure change tracking:
-
In the Admin Center, navigate to Settings > Change tracking.
-
Toggle on Change tracking enabled. When this is activated, the system starts recording newly detected change events across the network. If this option is toggled off, the system stops tracking new changes, although it still retains previously recorded data.
-
Use the Retention period selection field to select the duration for which you want to retain the change history. Options range from 6 months to 5 years. This setting determines how long the recorded change data is stored before automatic deletion.
-
Specify which types of changes to track by checking the desired categories. These include:
-
General: General operational changes within the network.
-
System: Changes to system configurations and settings.
-
Security: Modifications to security policies or incidents.
-
User Accounts: Creation, deletion, or alteration of user accounts.
-
Custom Audit Fields: Any other specific audit fields set up for customized tracking needs.
-
- After selecting the desired settings and tracking categories, click Save to apply the changes.
Purging change history
The system automatically cleans up change history data as it reaches the end of the selected retention period. However, you can manually clear the stored change history by clicking Purge in the Purge change history section. It's typically used when there's a policy change regarding change tracking, or if you wish to reset the tracking data.
Managing change history configuration in JSON format
In the Change tracking section, you can interact with the change history configuration in a more technical and detailed manner using JSON format.
-
Export JSON: You can export the entire change history configuration as a JSON file. By clicking on Export JSON, the current configuration is packaged into a JSON format. This is particularly useful for backup or sharing configuration details.
-
Edit as JSON: If you prefer a more direct and technical interaction with the change history configuration, click Edit as JSON to open the configuration in a separate window in a raw JSON format. You can then directly modify the configuration in this format.