Audit Log Operations

A list of operations that can be selected as specific events to track in audit can be found in the table below.

Event	Explanation
Change Security	A user changed a security setting in the Therefore™ Server.
Change Settings	A user has changed settings in the Therefore™ Server.
Connect	A user connected to the Therefore™ Server.
Delete Object	A user has deleted an object in the Therefore™ Server.
Disconnect	A user disconnected from the Therefore™ Server.
Doc Change	A document was changed from the Therefore™ Server.
Doc Change Index Data	Index data within a document was changed from the Therefore™ Server.
Doc Check Out	A document was checked out from the Therefore™ Server.
Doc Create Link	A link between documents was created in the Therefore™ Server.
Doc Demigrate	A document was demigrated from the Therefore™ Server.
Doc Export	A document was exported from Therefore™.
Doc Migrate	A document was migrated from the Therefore™ Server.
Doc New	A new document was created in the Therefore™ Server.
Doc Print	A document was printed from Therefore™.
Doc Retention	A document was retained in the Therefore™ Server.
Doc Retrieve	A document was retrieved from the Therefore™ Server.
Run Query	A query has run in the Therefore™ Server.
Save Object	An object was saved in the Therefore™ Server.
Server Start	The Therefore™ Server had started.
Server Stop	The Therefore™ Server was stopped.
Task Complete	A task was completed in the Therefore™ Server.
Task Create	A task was created in the Therefore™ Server.
Task Definition Change	A task definition has changed in the Therefore™ Server.
Task Delete	A task was deleted in the Therefore™ Server.
Task Status Change	A task status has changed in the Therefore™ Server.
WF Claim Instance	A workflow instance was claimed in the Therefore™ Server.
WF Delegate Instance	A workflow instance was delegated in the Therefore™ Server.
WF Delete Instance	A workflow instance was deleted in the Therefore™ Server. Contains the case/document number relevant to the instance.
WF Finish Process	A workflow process was finished in the Therefore™ Server.
WF Finish Task	A workflow task was finished in the Therefore™ Server.
WF Route Instance	A workflow instance was routed in the Therefore™ Server.
WF Save Instance	A workflow instance was saved in the Therefore™ Server.
WF Send Overdue Mail	An overdue mail was sent through a workflow in the Therefore™ Server.
WF Start Instance	A workflow instance was started in the Therefore™ Server.
WF Unclaim Instance	A workflow instance was unclaimed in the Therefore™ Server.