SailPoint Audit configuration
Configuring audit logging in SailPoint IdentityIQ: audit events, what to capture and using audit data for compliance.
Configuring audit logging in SailPoint IdentityIQ: audit events, what to capture and using audit data for compliance.
- Audit records who did what and when
- Choose audited actions in Global Settings
- Audit data feeds searches and compliance reports
- Plan retention and archiving deliberately
Why audit
Audit logging records who did what and when, providing the evidence compliance and investigations depend on. It is configured, not on-by-default for everything.
Audit configuration
In Global Settings you choose which actions to audit, for example role changes, certification decisions, logins and provisioning, balancing coverage against volume.
Reading audit data
Audit events are searchable and feed audit reports and dashboards, letting you answer questions like who approved a given access.
Retention
Plan retention and archiving so audit data is available for your compliance window without overwhelming the database.