Event Details
Learn about various audit log events.
This topic contains a list of audit log events category. For each category, there is a table that list is various possible entries with their description and other useful information.
General Events
| Entry | Moment of Capture | Event Initiator/Event Source | Notes |
|---|---|---|---|
| CheckIn | User or system check-in | SharePoint | Available in the legacy audit log presentation |
| CheckOut | User or system check-out | SharePoint | Available in the legacy audit log presentation |
| ChildDelete | Deletion of one of the object's child objects - occurs for a library when one of its documents or list items is deleted so it only shows in the site audit log | SharePoint | Not applicable to document audit logs. |
| ChildMove | Move of one of the object's child objects - occurs for a library when one of its documents or list items is moved so it only shows in the site audit log | SharePoint | Not applicable to document audit logs. |
Change Request
| Entry | Moment of Capture | Event Initiator/Event Source | Description Format and Inclusions | Notes |
|---|---|---|---|---|
| AuthorChange | Initiation of an Author Change Request | NextDocs/ChangeRequest/Author Change | Initiated Change Request Workflow for Type AuthorChange, Reason for change is “<reason entered>”. | New as of 6.0 |
| AuthorChange | Approval of an Author Change Request | NextDocs/ChangeRequest/Author Change | Document Author changed to <new author>. | New as of 6.0 |
| ContentChange | Initiation of a Content Change Request | NextDocs/ChangeRequest/ContentChange | Initiated Change Request Workflow for Type ContentChange, Reason for change is “<reason entered>”. | New as of 6.0 |
| Obsolete | Initiation of an Obsoletion Change Request | NextDocs/ChangeRequest/Obsolete | Initiated Change Request Workflow for Type Obsolete, Reason for change is “<reason entered>”. | New as of 6.0 |
Controlled Print
| Entry | Moment of Capture | Event Initiator/Event Source | Description Format and Inclusions | Notes |
|---|---|---|---|---|
| Issue | Issue of a Controlled Print | NextDocs | Controlled copy <document name>-X.X-Y <label> printed by <User-ID>. Reason provided: <reason entered by user> | New as of 6.0 |
| Reprint | Reprint of a Controlled Print | NextDocs | Controlled copy <document name>-X.X-Y <label> recalled by <User-ID>. Reason provided: <reason entered by user> | New as of 6.0 |
| Recall | Recall of a Controlled Print | NextDocs | Controlled copy <document name>-X.X-Y <label> reprinted by <User-ID>. Reason provided: <reason entered by user> | New as of 6.0 |
| Expire | Controlled Print Expired | NextDocs | Controlled copy <document name>-X.X-Y <label> expired by <User-ID>. Reason provided: Document Version X.X promoted to Lifecycle Stage: <lifecycle stage> | New as of 6.0 |
| ConvertToPDF | Compound document is converted to a PDF document | NextDocs | N/A | Only available in 3.x, discontinued in 5.x |
| Copy | Copy a Smart Document | NextDocs | N/A | Smart Document only |
| Delete | Deletion of an object | SharePoint | N/A | Augmented by NDDelete |
| eApproval | User electronically approves a document by entering an user name and a password. | NextDocs | Document electronically approved by <User-ID> with the comment “<comment entered>” at <date and time with GMT offset> | Previously SignElectric |
| eApprovalFail | User enters an invalid user name / password during electronic approval. | NextDocs | User <User-ID> supplied invalid credentials. | N/A |
| eRejection | User rejects a task and is required to enter credentials | NextDocs | Document electronically rejected by <User-ID> with the comment “<comments entered>” at <date and time with GMT offset>. | N/A |
| eRejectionFail | User enters an invalid user name / password during eRejection. | NextDocs | User <User-ID> supplied invalid credentials. | N/A |
| FileNewVersion | A new version of a document has been created. | SharePoint (Version History) | N/A | Available in the legacy audit log presentation only |
| ItemNewVersion | A new version of a list item has been created. | SharePoint (Version History) | N/A | Available in the legacy audit log presentation only |
| LifecycleDemote | User/Lifecycle/Workflow demotes a document to lower stage in lifecycle | NextDocs/Lifecycle | N/A | Available for 5.4 thru 5.6, replaced by LifecycleStatusChange in 6.0 |
| LifecyclePromote | User/Lifecycle/Workflow promotes a document to higher stage in lifecycle | NextDocs/Lifecycle | N/A | Available for 5.4 thru 5.6, replaced by LifecycleStatusChange in 6.0 |
| LifecycleReset | User/Lifecycle/Workflow restarts the document lifecycle | NextDocs/Lifecycle | New minor version is created as part of lifecycle reset | Available for 5.4 thru 5.6, replaced by LifecycleStatusChange in 6.0 for a Change Request. Implemented in 6.1 for documents reset through a ContentChangeRequest. |
| LifecycleRestart | User/Lifecycle/Workflow restarts a document within a lifecycle | NextDocs/Lifecycle | N/A | Available for 5.4 thru 5.6, replaced by LifecycleStatusChange in 6.0 |
| LifecycleStatusChange | User/Lifecycle/Workflow transitions a document to a different stage in lifecycle | NextDocs/Lifecycle | Document Lifecycle Status changed from <previous stage> to <current stage> by SharePoint\system | New as of 6.0 |
| LocalTimeVerified | User verified their local time | NextDocs | N/A | Only used when the Local Time Zone for audit log is enabled; recorded each time a user verifies local time zone. |
| MetadataUpdate | Smart Document move / reclassify | NextDocs | N/A | Was "Move" for the 5.2 release, changed thereafter. |
| Move | Move or rename of an object | SharePoint | N/A | Available in the legacy audit log presentation |
| NDAutoName | System auto name of document upon creation | NextDocs/System | Document name was changed by NextDocs Auto-Naming Feature from <original> to <auto-name> | Add to New Document Requests in 6.1 |
| NDCheckIn | Check-in of object by user or workflow | NextDocs | If a rendered PDF is modified, the displayed description is Checkin of the PDF rendition | Augments Checkin (SharePoint Event). Contains check-in comments if configured. Also as of 5.2 SDF, captured for first version of a Smart Document. |
| NDCheckOut | Check-out of object by user or workflow | NextDocs | If a rendered PDF is modified, the displayed description says Checkout of the PDF rendition. | Augments Checkout (SharePoint Event) |
| NDDelete | Deletion of an object | NextDocs | N/A | Augments Delete (SharePoint Event) |
| NDPrint | Menu based print initiation (controlled, uncontrolled, clean copy, etc.) | NextDocs | N/A | See Controlled Print |
| PublishMajorVersion | Document promoted to the major version (“IncrementVersion” lifecycle operation) | NextDocs | N/A | Only present in 3.5.3 release. |
Relationships
| Entry | Moment of Capture | Event Initiator/Event Source | Description Format and Inclusions | Notes |
|---|---|---|---|---|
| Create | Document relationship created by a user or a system | NextDocs/Relationships | <Parent/Child> <relationship type> created with <document name> in <location> | Available as of 5.4 release |
| Delete | Document relationship deleted by a user or a system | NextDocs/Relationships | <Relationship Type> relationship deleted due to deletion of a related document <document name and location> | Available as of 5.4 release |
| Re-Establish | Document relationship moved forward to a newer version by the system | NextDocs/Relationships | <Parent/Child> <Relationship type> reestablished from a prior version with <document name> in <location>. | Available as of 5.4 release |
| Rendition Created | PDF rendition of the source document | NextDocs/Workflow | PDF rendition created as part of the Approval workflow | Available as of 6.1 |
| RequestId | New document created upon approval of New Document Request | NextDocs/Workflow | Document created from New Document Request Workflow with Request Id <request id> | Available as of 6.1 |
| SignDigital | User digitally signs a document. | NextDocs/SignEngine | Document signed by <User-ID> with the reason <reason selected> at <date and time with GMT offset> | N/A |
| SignDigitalFail | User enters an invalid username / password during digital signature. | NextDocs/SignEngine | User <User-ID> supplied invalid credentials. | N/A |
| SignElectronic | User electronically approves a document by entering username and password. | NextDocs/SignEngine | Document electronically signed by <User-ID> at <date> with reason <reason selected> | Changed to eApproval as of ND 3.8/5.1. Electronic Signatures added as of 6.1. |
| SignElectronicFail | User enters an invalid user name / password during electronic signature. | NextDocs/SignEngine | User <User-ID> supplied invalid credentials. | Electronic Signatures added as of 6.1 |
| StandardApproval | User signs without authenticating | NextDocs/StandardApproval | Document approved by <User-ID> with the comment”<comment entered> at <date and time with GMT offset>. | Available as of 6.1 |
| StandardRejection | User rejects without authentication | NextDocs/StandardRejection | Document rejected by <User-ID> with the comment <comment entered> at <date and time with GMT offset>. | Available as of 6.1 |
| TaskCompleted | Workflow task completed | NextDocs/System | Description contains comments as entered by the user who completed the task. | Post-3.8/5.2: Written persistently into the audit log; contains workflow comments if so configured, updated in 6.0 |
| Undelete | Document restored from the recycle bin | SharePoint | N/A | N/A |
| Update | Any update of an object including changing properties. | SharePoint | N/A | Available in "legacy audit log" presentation |
| UserDelegation | User delegates a task to another user | NextDocs/Workflow | <task name> delegated from <original user> to <new user> by <User-ID of person doing the delegation> | New as of 6.0 |
| VersionChange | Version is incremented or decremented as part of a workflow | NextDocs/Lifecycle | Version changed from <previous version> to <current version> as part of the <workflow name>. | New as of 6.0 |
| WorkflowCancelled | Workflow cancelled by a user | NextDocs/Workflow | N/A | Replaced by Workflow Terminated as of 6.0 |
| WorkflowStarted | User transitions to a lifecycle stage that initiates a workflow or manually starts a workflow | NextDocs/Workflow | Workflow <workflow name> started by <User-ID> (or) Workflow <workflow name> started by SharePoint\system. | New as of 6.0 |
| WorkflowTerminated | User terminates a workflow or workflow terminates due to system error | NextDocs/Workflow | Workflow <workflow name> terminated by <User-ID> (or) Workflow <workflow name> terminated by the system as a result of an error in the workflow. | New as of 6.0 |