View detailed information on admin actions
To improve visibility into user actions, Smart Hub has introduced functionality to allow you to view detailed information regarding key user actions performed in Smart Hub, including:
-
The creation, modification, and deletion of search engines.
-
The creation, modification, and deletion of user experience tuning stages.
-
Modifications to storage settings.
-
Modifications to security settings.
-
Modifications to analytics.
-
Modifications to user profiles.
-
Modifications to conversational search.
-
etc.
The log details for these actions also capture details on the user who performed the action, the timestamp of the action, the type of action, and the communicated data before and after the changes.
To view your admin action data, you can query the Elasticsearch index or use a reporting tool, such as Grafana, Kibana, or Opensearch dashboards.
Limitations
The following admin actions are not tracked by SmartHub audit logging:
-
Exporting Smart Hub settings
-
Deleting items from the Analytics index
-
The initial Kibana setup.
-
Changes made through the UI Editor.
-
Modifications to logger settings.
-
Expertise page creation.
-
The creation, modification, and deletion of 'Questions And Answers'.
Enabling/Disabling admin action reporting
By default, the admin action reporting feature is enabled, and the Audit Logging Index Name is set to audit-index.
To disable admin action reporting, do the following:
-
Navigate to the Smart Hub administration portal.
-
Click General Settings, then click the Edit button for the Storage Settings.
-
Clear the value of the Audit Logging Index Name field.
-
Save your changes.
To re-enable the admin action reporting, provide a valid name in the Audit Logging Index Name field (for example, the default audit-index), and save the changes.
Overview of collected admin action data
The following table describes the audit log information for every admin action event that is captured by SmartHub:
| Property | Description |
|---|---|
| DateTimeUtc | This provides the timestamp in UTC for when the change event was logged. |
| Differences | This specifies every difference that was changed by the admin. It has three possible lists: Additions, Deletions, and Modifications. |
| Differences.Additions |
This specifies a list of newly added items. Each entry has:
|
| Differences.Deletions |
This specifies a list of removed items. Each entry has:
|
| Differences.Modifications |
This specifies a list of modified items. Each entry has:
|
| Differences.Modifications[].Change.Original | This specifies the original value before the modification. |
| Differences.Modifications[].Change.Updated | This specifies the updated value after the modification. |
| User | This specifies who was the admin user who made the specific updates. |
Refer to the following example of the JSON file that is saved to the Elasticsearch for admin actions:
{
"_index" : "audit-index",
"_id" : "cdda6fbc-c7c9-4607-94e6-eba625c4e3e0",
"_score" : 1.0,
"_source" : {
"DateTimeUtc" : "2025-10-03T09:32:14.6968523Z",
"Differences" : {
"Additions" : [
{
"Change" : "/FederatorConfiguration/ConversationalSearchConfiguration/ConversationalBotConfiguration/SearchEngines/string: <string>Azure jiracontent</string>",
"Context" : "ConversationalBot: Azure OpenAI Conversational Bot"
},
{
"Change" : "/FederatorConfiguration/ConversationalSearchConfiguration/ConversationalBotConfiguration/SearchEngines/string: <string>Azure spocontent</string>",
"Context" : "ConversationalBot: Azure OpenAI Conversational Bot"
}
],
"Deletions" : [
{
"Change" : "/FederatorConfiguration/ConversationalSearchConfiguration/ConversationalBotConfiguration/ChunksProperties/string: <string>clickUri</string>",
"Context" : "ConversationalBot: Azure OpenAI Conversational Bot"
}
],
"Modifications" : [
{
"Change" : {
"Original" : "/FederatorConfiguration/ConversationalSearchConfiguration/ConversationalBotConfiguration/NumberOfChunksToUse: 101",
"Updated" : "/FederatorConfiguration/ConversationalSearchConfiguration/ConversationalBotConfiguration/NumberOfChunksToUse: 100"
},
"Context" : "ConversationalBot: Azure OpenAI Conversational Bot"
}
]
},
"User" : " user@example.com "
}
}