# Auditing Configuration Items

ASM provides the capability to audit entities on your CMDB all the way down to field level changes.  This is particularly helpful when managing the federated CMDB as it provides an easy method of understanding what fields were changed and when.  ASM captures the following:

1. The Original Value and the New Value
2. Action Taken
3. Origin of the change
4. Data/Time of Change
5. Field Changed
6. Reason for Change (If enabled)

<figure><img src="https://1375663122-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhlW9jKl7dcDggHAPhNU9%2Fuploads%2FW7uz580VAvsZzGbfSSw8%2FScreenshot%202025-03-03%20at%2007.04.49.png?alt=media&#x26;token=3b6ed586-6ba3-49f3-aebb-8093d9824265" alt=""><figcaption></figcaption></figure>

The Audit trail of changes to CI can be found on the individual CI record in the Data menu on the left-hand side menu links pane. &#x20;

<figure><img src="https://1375663122-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhlW9jKl7dcDggHAPhNU9%2Fuploads%2FgSy4v9nR4hD0PkMUcFLM%2FScreenshot%202025-03-03%20at%2006.52.36.png?alt=media&#x26;token=d4c35607-31ea-49a0-8daa-37e2b97f2f0f" alt=""><figcaption></figcaption></figure>

## Auditing CMDB Items <a href="#searchin" id="searchin"></a>

There are a few different levels of Audit available for your CMDB items.

* System Level Audits - [Enable System Level Audit](https://docs.alemba.com/asm-hermes/setup-and-configure-asm/configuring-your-system/system-administration-settings/cmdb-configuration-management-database/cmdb-settings#audit-trail)
  * You must enable Audit on the entities you want to have basic auditing logged against.
* Field level Audits - [Enable Field-Level Audit](https://docs.alemba.com/asm-hermes/setup-and-configure-asm/configuring-your-system/configuring-screens/building-screens-in-asm-designer/configuring-fields#field-options-section)
  * Field Audit goes beyond the standard audit captures, to include specific fields you can select.

{% hint style="info" %}
**Before You Start**

You must enable CMDB Item Auditing in CMDB Item Type Details.

1. To enable it, access System Administration>CMDB>CMDB Item Type
2. Open the Item Type you want to Audit (child types will inherit permissions from the parent type)
3. Tick the "Turn Audit On" check box

![](https://docs.alemba.com/~gitbook/image?url=https%3A%2F%2F1375663122-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FhlW9jKl7dcDggHAPhNU9%252Fuploads%252F25acVe9SxdADBM8ybSon%252FScreenshot%25202025-03-03%2520at%252007.51.27.jpg%3Falt%3Dmedia%26token%3Ddaee8adf-37db-4047-9a51-d2814af5f342\&width=300\&dpr=4\&quality=100\&sign=9ebbdaae\&sv=2)
{% endhint %}

### System Audit

A **System Level audit** is configured in System Administration in your CMDB Settings.  The Audit Trail options enable you to select the types of CMDB entities to track when changes are made in their Details window.

For performance reasons, the **Audit Trail** only tracks changes to long text fields (such as **Description**) up until the size limit of the New Value field, which is 80 characters. So while the audit trail will record a change made to the description, it may not track the entire change made to a long text field.

* Organizations - Select this option to track changes made to Organization entities.
* Contracts - Select this option to track changes made to Contracts entities.
* Locations - Select this option to track changes made to Location entities.
* People - Select this option to track changes made to Person entities.
* Change Calendar - Select this option to track changes made to Change Calendars entities.
* Agreements - Select this option to track changes made to Agreements entities.
* Subscriber Groups - Select this option to track changes made to Subscriber Groups entities.
* Change Reason - Select this option to enable the Change Reason window.

### **Field Audit**

**Field level auditing** is far more specific than the System-level audit.  This option (set in the field's properties in Screen Designer) allows auditing of the changes made to an individual field. Changes can be seen under the **Audit** option in the explorer of the corresponding screen.

If the field is a standard data field or an extensible field inherited from another screen, this option will be labeled **Audit (Impacts Parent)**. Otherwise, if the field is particular to the current screen, it will be labeled **Audit**.

<figure><img src="https://1375663122-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhlW9jKl7dcDggHAPhNU9%2Fuploads%2FxzRA9XX7ZFHS5UYvi5de%2FScreenshot%202025-03-03%20at%2006.44.30.png?alt=media&#x26;token=5fb0e5f9-48d0-4313-8b28-8dbcf7045d50" alt=""><figcaption></figcaption></figure>

## View the Audit Trail <a href="#searchin" id="searchin"></a>

<figure><img src="https://1375663122-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhlW9jKl7dcDggHAPhNU9%2Fuploads%2FW7uz580VAvsZzGbfSSw8%2FScreenshot%202025-03-03%20at%2007.04.49.png?alt=media&#x26;token=3b6ed586-6ba3-49f3-aebb-8093d9824265" alt=""><figcaption></figcaption></figure>

1. Access the CMDB Item you want to view
2. Click "Audit" from the data menu on the left

<figure><img src="https://1375663122-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhlW9jKl7dcDggHAPhNU9%2Fuploads%2FgSy4v9nR4hD0PkMUcFLM%2FScreenshot%202025-03-03%20at%2006.52.36.png?alt=media&#x26;token=d4c35607-31ea-49a0-8daa-37e2b97f2f0f" alt=""><figcaption></figcaption></figure>

3. View the Audit Log.  From here, you can alsoPrint or export one or more results.

<figure><img src="https://1375663122-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhlW9jKl7dcDggHAPhNU9%2Fuploads%2FNGTvrN3A89ZprWDQjCTh%2FScreenshot%202025-03-03%20at%2006.58.59.png?alt=media&#x26;token=cbbfc8e4-6a8f-4007-a09b-d624aa65ab3f" alt=""><figcaption></figcaption></figure>
