15. Monitoring, audit and reports
Overview dashboard, audit log, reports and alerts.
Everything an agent, an Office add-in or an administrator does is written to one append-only, hash-chained audit log on the server. Four console pages read that log:
| Page | Sidebar path | Question it answers |
|---|---|---|
| Overview | Overview | What happened in the selected period, and what needs attention first? |
| Audit Log | Activity → Audit Log | Show me the exact records, filtered, with every detail, and let me export them. |
| Reports | Reports → Reports | Give me a formatted PDF/CSV/JSON for a period and scope, now, by e-mail or on a schedule. |
| Alerts | Reports → Alerts | Which events should send an alert e-mail? |
All four use the same event taxonomy: one server-side source defines the 12 event categories, the 5 severity levels and the display name of every event. A number on the Overview, a category in the Audit Log filter, a report table and an alert trigger therefore always count the same events.
In this topic
- 15.1 Severity and categories
Every audit record gets a severity, computed on the server from its event name. Severity tells you how quickly someone should look; category (below) tells you what kind of event it is. When an event belongs to…
- 15.2 Overview
Overview is the landing page after sign-in. It summarises the audit log for a period and the live agent inventory, and every number is a drill-down into the Audit Log or the Agents page.
- 15.3 Audit Log
Activity → Audit Log lists every audit record, newest first, 100 per page. All filtering runs on the server against the whole history, so “N matching records” and the page count describe the full filtered set.
- 15.4 Reports
Reports → Reports produces formatted reports from the audit log (and, for two report types, from the live agent inventory). Each report can be downloaded, e-mailed once, or sent automatically on a schedule.
- 15.5 Alerts
Reports → Alerts decides what sends an alert e-mail. Where alerts go is configured elsewhere:
- 15.6 Common audit events
Display names are those shown in the console, reports and alert mails.