Is there an audit log on the K1000?
We have had software deployments "disappear" from our K1000, so if there is an audit log to show if a user is deleting these, it would be great to know.
-
Thank you for the quick response. - sbedard 6 years ago
Answers (1)
Top Answer
Hi,
Are you talking about a Managed Install or a Script maybe?
Anyway, first make sure your KACE appliance is set to track\store historical data, go to History > Subscriptions > Objects . For example I am retaining data from up to three months ago for the following modules.
If that is true, you could go to History > Reporting > Objects, Sort by Managed Installs for example, and it should show Who deleted a managed install:
A user named "admin" (the local KACE admin account), deleted a Managed install for Firefox on November 6th 2018 at around 5:50PM.
In this example... everyone with access to the "admin" account would be a suspect.