How to enable Audit Logging in Qlik Sense Enterprise on Windows

[Sonja_Bauernfeind]

Qlik Sense Audit logging allows tracking of additional information, such as user actions in the Qlik Sense Management Console.

Audit logging can be enabled individually on services and audit logs are stored in the \Audit log subfolder. 

Example: AuditActivity_Repository.txt log, located by default in %ProgramData%\Qlik\Sense\Log\Repository\Audit

Environment

Qlik Sense Enterprise on Windows 

To enable (by service):

1. Open the Qlik Sense Management Console
2. Navigate to the Service
3. Open the node to configure
4. Select Logging from the Properties menu on the right-hand side
5. Choose your desired Audit logging level

Additional logging levels

In addition to default audit logging, you can increase the Engine logging level to include user selection capture. 

1. Stop the Qlik Sense Engine service
2. Navigate to C:\ProgramData\Qlik\Sense\Engine\
3. Open the settings.ini file
4. Edit the file to add:
   

   [Settings 7]
   AuditLogAllSelection=1
   AuditLogMessageLimit=10000
   MaxCurSelEntries=6​

    
   You need an empty row after a setting in settings.ini for it to take effect. i. e. press enters after the last line.  The parameter MaxCurSelEntries is optional but can be used to increase the number of actually selected entries to be captured in the log. The default value is 6.

5. Restart the Engine service and Service Dispatcher.
6. Make selections on an application in the hub. 
7. Go to C:\ProgramData\Qlik\Sense\Log\Engine\Trace and look for a ServerName_Audit_Engine.txt.

Related Content:

Qlik Sense: Working with audit logs to check user activity on sheet/app level 
How to audit who deleted apps in the Qlik Sense Management Console  

[AdamBS]

Hi Sonja

Are there any other switches - I was hoping to see sheet selection too.

Cheers, Adam

[Sonja_Bauernfeind]

Hello @AdamBS 

Let me look into this for you!

All the best,
Sonja 

[DavidFosterVF]

Hi @Sonja_Bauernfeind 

Is there documentation on what audit logging captures during a user session?

[Sonja_Bauernfeind]

Hello @DavidFosterVF 

Can you clarify what you mean by "user session"?

The audit log in question here logs back-end work, see the available fields here: Audit activity log.

All the best,
Sonja 

[DavidFosterVF]

similar to what @AdamBS was asking.

• Sheet navigation
• Filter selections
• AppObject interactions

[Sonja_Bauernfeind]

Hello @DavidFosterVF and @AdamBS 

Patricia has put together information for you on this! See Qlik Sense: Working with audit logs to check user activity on sheet/app level.

All the best,
Sonja

[DavidFosterVF]

Thanks @Sonja_Bauernfeind 

[Huiying]

will this log bring heavy load to engine? Our customer facing engines are alreayd pretty busy, that's why I'm concerned. From another hand, this log might be useful...

[Sonja_Bauernfeind]

Hello @Huiying We cannot anticipate the exact extent of additional load that you will see (as this depends on the environment and user activity). But as with any audit logging (and trace/debug logging), it will generate an additional workload for the services.

While the impact of the audit log is usually negligible, I would recommend running a test in your environment for a few days to observe user impact.

All the best,
Sonja 

[JHuis]

@Sonja_Bauernfeind ,

Is it not possible to edit the engine settings? Because in the QMC you could edit a lot of settings. 

Or does this has to happen on the server side?