article Qlik Sense Enterprise on Windows and QlikView: Offline User Assignment Log in Official Support Articles

Qlik Sense Enterprise on Windows and QlikView: Offline User Assignment Log

Sonja_Bauernfeind — Mon, 24 Nov 2025 14:29:52 GMT

As part of the agreement of granting a customer offline license usage, the customer is required to regularly upload User Assignment log files. This essentially replicates the user assignment data which is sent to Qlik in a manual process.

Applicable Products:

Licensed with a long term offline license.

All information regarding user subject (user information) is hashed using SHA256 to prevent Qlik from accessing the original data. (The information is encrypted both in transit and at rest).

Data transmitted in the log files:

User Assignment Log File Content

Data Stored In Logs

Data Element	Comment	Sample Data
Signed License Key		See above
Allotment name	Professional / Analyzer	“professional”
Subject	Domain / User ID; if this an add or delete transaction. By delete the subject will be removed immediately. An internal id will be used to secure sync to other deployments using the same Signed License Key. The internal id will disappear within 60 days after a delete transaction. (This information is stored for all assigned users until such a time that the assignment is deleted at which point it is deleted. The information is used for synchronizing assignments across deployments in order to facilitate the single-license-multi-deployment scenario. It is encrypted in transit and at rest.)	“acme\bob” user name included in hashed form in the log files and will show as something like: “a24a2f2b67c5e051bcb6cd2d7a9f7ebe”
User agent	Build by the License service version (operating system) and Product (e.g. QSEfW, QCS, QSEfE, ADBI, Qlik Core, QV)	Licenses/1.6.4 (windows) QSEfW
Source	Hashed ID to make each deployment unique, e.g. a Qlik Sense Enterprise on Windows and a Qlik Sense Enterprise on Kubernetes will have different Source ID's	fbe89d02-6d24-4595-915e-c52ce76f2195
Sync metadata	Versioning information about the subjects and list of subjects to manage the synchronization process. To review the information, copy the message content of the log and decode it using a base64 decoder.	{ "source": "my assignments", "bases": [{ "license": "1234 1234 1234 1234", "version": 0 }], "patches": [{ "instance": "", "version": 0, "license": "1234 1234 1234 1234", "allotment": "analyzer", "subject": \\generated4, "created": "2019-04-18T10:01:35.024031Z" }

Re: Offline User Assignment Log

paivanov — Thu, 21 Jan 2021 08:17:54 GMT

which type of hash are used when encrypted subject and source ?

Re: Offline User Assignment Log

Sonja_Bauernfeind — Thu, 21 Jan 2021 08:35:12 GMT

Hello @paivanov - let me see if we can get that information 🙂

Re: Offline User Assignment Log

BMazurekDND — Fri, 25 Jun 2021 17:45:05 GMT

What hashing algorithm is being used?
When you say the information is "encrypted both in transit and rest", can you elaborate on what precisely "at rest" means in this case?

Re: Offline User Assignment Log

Sonja_Bauernfeind — Mon, 28 Jun 2021 05:07:24 GMT

Hello @BMazurekDND - let me review your questions with our SMEs.

Re: Offline User Assignment Log

Sonja_Bauernfeind — Mon, 28 Jun 2021 09:13:49 GMT

Hello @BMazurekDND

The algorithm used cannot be shared. But as for your second question:

At rest means the database is encrypted as well, meaning if a DB admin took a look at the db they would not be able to see the data.

Re: Offline User Assignment Log

BMazurekDND — Mon, 28 Jun 2021 12:50:21 GMT

For context, a significant portion of offline users are likely to be high security installations...think intelligence, military, diplomatic, law enforcement, etc.

When there are many secure cryptographic hashing functions available, you seem to be implying that Qlik chose to invent their own algorithm (which is a red flag to such clients).

What can you say to give these clients confidence that Qlik is treating their information securely? (Aside from "trust us" assurances...)

Re: Offline User Assignment Log

Sonja_Bauernfeind — Mon, 28 Jun 2021 13:33:10 GMT

Absolutely understood, @BMazurekDND. Let me reach out to the responsible teams and get back to you.

Re: Offline User Assignment Log

Sonja_Bauernfeind — Wed, 30 Jun 2021 13:42:03 GMT

Hello @BMazurekDND - We updated the article with the hashing function being used (SHA256).

Re: Offline User Assignment Log

BMazurekDND — Wed, 30 Jun 2021 14:15:45 GMT

Thank you, Sonja.

Re: Offline User Assignment Log

sis — Wed, 25 Oct 2023 08:22:33 GMT

@Sonja_Bauernfeind

1． Does the Data Element "Sync metadata" contain sensitive information other than the user ID?

2． Will the contents of the Data Element "Sync metadata" be encrypted in the same way as the Data Element "Signed License Key" and "Subject"?

It seems to me that the "license" and "subject" values in Sample Data are not encrypted.

Re: Offline User Assignment Log

Sonja_Bauernfeind — Mon, 06 Nov 2023 07:04:20 GMT

Hello @sis

All user information is encrypted at all times and no sensitive data is submitted in the sync metadata field. As for your second question, we are looking into this for you.

All the best,
Sonja

Re: Offline User Assignment Log

Sonja_Bauernfeind — Mon, 06 Nov 2023 10:39:42 GMT

Hello @sis

To return to answering your questions:

Question: Does the Data Element "Sync metadata" contain sensitive information other than the user ID?
Answer: Sync metadata does not include any sensitive information. You can verify what is sent by decoding the message in the log in a Base64 decoder. This will show you what is sent to Qlik.

Question: Will the contents of the Data Element "Sync metadata" be encrypted in the same way as the Data Element "Signed License Key" and "Subject"?
Answer: It is not encrypted, but it does not include any sensitive information. It is base64 encoded in the log file, and you can decode it using any available base64 decoder.

All the best,
Sonja

Re: Offline User Assignment Log

sis — Tue, 07 Nov 2023 02:57:02 GMT

@Sonja_Bauernfeind

Thanks for the answer.

Is it correct to recognize that only the following parts contain user information? Is there anything else?

　・ The part called Domain / User ID where the Data Element is listed in "Subject"

　・ Data Element is the "subject" part of "Sync metadata"

Re: Offline User Assignment Log

Sonja_Bauernfeind — Tue, 07 Nov 2023 08:15:50 GMT

@sis Sync metadata does not include User information. User information is included in Subject and is hashed.

Re: Offline User Assignment Log

sis — Tue, 07 Nov 2023 08:19:51 GMT

Thank you, Sonja.

Re: Offline User Assignment Log

Sonja_Bauernfeind — Tue, 07 Nov 2023 08:24:45 GMT

Anytime!

article Qlik Sense Enterprise on Windows and QlikView: Offline User Assignment Log in Official Support Articles

Qlik Sense Enterprise on Windows and QlikView: Offline User Assignment Log

Applicable Products:

Data transmitted in the log files:

User Assignment Log File Content

Data Stored In Logs

Related Content:

Re: Offline User Assignment Log

Re: Offline User Assignment Log

Re: Offline User Assignment Log

Re: Offline User Assignment Log

Re: Offline User Assignment Log

Re: Offline User Assignment Log

Re: Offline User Assignment Log

Re: Offline User Assignment Log

Re: Offline User Assignment Log

Re: Offline User Assignment Log

Re: Offline User Assignment Log

Re: Offline User Assignment Log

Re: Offline User Assignment Log

Re: Offline User Assignment Log

Re: Offline User Assignment Log

Re: Offline User Assignment Log