# Monitor Compliance The **Compliance** page in Dashboard supports compliance reviews and incident investigations. It has two tabs: - **Data Management**: Shows a record for every session or identity whose data has been deleted, whether through automatic data retention rules or an individual deletion request. Use this tab to confirm that a deletion completed successfully. - **Audit Logs**: Shows a trail of actions taken by users and system processes in Dashboard. Use this tab to see who performed an action, when they performed it, and from which IP address. On this page, you can: - Filter the data shown on the Data Management and Audit Logs tabs - View individual audit logs - Export audit logs to a CSV file *** ## Data Management The table on the **Data Management** tab shows the following columns. | Column | Description | | --------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Name | Name associated with the deleted record, if available. To protect privacy, only the first name and last initial are shown. | | Type | Whether the deleted record was a _Session_ or an _Identity_. | | Entity ID | Unique identifier of the deleted Session or Identity. | | Created On | Date and time the original record was created. | | Data Deleted On | Date and time the record's data was deleted. | | Status | Current state of the deletion: _Init_, _Success_, _Processing_, _Failed_, or _Interrupted_. _Init_ means the deletion task has been created and is queued to run. | {/* PM: Confirm if the above definition if _Init_ is correct */} Records on this tab cannot be edited or deleted. It provides a read-only trail confirming that deletions occurred. ### Filter Data Management 1. In the left menu, click **Compliance**. 2. Make sure you're on the **Data Management** tab. 3. Click **Add Filter** in the top left. 4. Select the column you want to filter by: - **Deleted Name**: Enter the name you want to search for. - **Deleted Type**: Select _Session_ or _Identity_. - **Deleted ID**: Enter the entity ID you want to search for. - **Created At**: Select a start and end date from the calendar to only show records created in that range. - **Deleted At**: Select a start and end date from the calendar to only show records deleted in that range. - **Status**: Select _Init_, _Success_, _Processing_, _Failed_, or _Interrupted_. 5. Click **Apply**. The table displays the records that fit your criteria. 6. Repeat these steps to add additional filters. *** ## Audit Logs The **Audit Logs** tab records actions taken by Dashboard users and system processes, so you can trace who performed an action, when, and from which IP address. The first time you open this tab in a session, the **Audit logs time preview** dialog appears, letting you know that only events from the past 30 days are displayed by default; you can expand the range with the Timestamp filter. Select **Don't show this anymore** to stop seeing this dialog, or click **Continue** to dismiss it. The table on the **Audit Logs** tab shows the following columns. | Column | Description | | --------- | ---------------------------------------------------------------------------------------------------------------------------------------- | | Timestamp | Date and time the event occurred. | | Event ID | Unique identifier generated for the event. | | Actor | User or system process that performed the action, shown with their ID and, if applicable, email. | | Event | Action that was performed: _Configuration Create_, _Configuration Update_, _Login Attempt_, _Logout_, _User Created_, or _User Deleted_. | | Type | Category of the resource the event affected: _Configuration_, _Executive_, _Flow_, _Workflow_, _Identity_, or _Session_. | Audit log entries cannot be edited or deleted. ### Filter Audit Logs 1. In the left menu, click **Compliance**. 2. Click the **Audit Logs** tab. 3. Click **Add Filter** in the top left. 4. Select the column you want to filter by: - **Event**: Select _Configuration Create_, _Configuration Update_, _Login Attempt_, _Logout_, _User Created_, or _User Deleted_. - **Type**: Select _Configuration_, _Executive_, _Flow_, _Workflow_, _Identity_, or _Session_. - **Actor**: Enter the name or ID of the actor you want to search for. - **Email**: Enter the email address of the actor you want to search for. - **IP Address**: Enter the IP address you want to search for. - **Timestamp**: Select a start and end date from the calendar to only show events that occurred in that range. 5. Click **Apply**. The table displays the events that fit your criteria. 6. Repeat these steps to add additional filters. ### View Audit Logs Click anywhere in the **Timestamp** column for a row in the Audit Logs table to open a panel with more details about that event. The panel slides out from the right side of the screen. The panel has four tabs: - **User**: Shows details about the person or system that performed the action. | Field | Description | | ------------ | ------------------------------------------------------- | | Executive ID | Unique identifier of the user who performed the action. | | Email | Email address of the user who performed the action. | | Role | Role of the user at the time of the action. | - **Event**: Shows details about the action itself. | Field | Description | | ----------------- | -------------------------------------------------------------------------------- | | Timestamp | Date and time the event happened. | | Event IUDD | Unique identifier generated for the event. | | Type | Category of the resource the event affected, such as _SESSION_. | | Event | Name of the action that was performed, such as _Session viewed_. | | Managed Entity ID | ID of the specific record the action affected, such as a session or identity ID. | {/* PM: Is Event IUDD a typo for Event ID? */} - **Source**: Shows details about where the action came from. | Field | Description | | ---------- | -------------------------------------------------------- | | IP | IP address the action came from. | | User Agent | Browser and operating system used to perform the action. | - **Location**: Shows details about the part of the system where the action took place. | Field | Description | | ----------- | ---------------------------------------------------------------------- | | Application | Internal service where the action took place, such as _USER\_SERVICE_. | | API Key | API key associated with the request. | ### Export Audit Logs 1. In the left menu, click **Compliance**. 2. Click the **Audit Logs** tab. 3. Click **Export to CSV** in the top right to download the current table data. Download starts immediately; no dialog appears.