Print

Audit Log Search

There are two places on eCase where you can view the history of cases.

- Audit Log can be found on an individual case under the Admin menu. The audit log will refer to the case you are viewing at that time. Refer to the Audit Log for a case section.

- Audit Log Search is the option to view the history for multiple cases. To view this option, you must have the Search the Audit Log privilege on your user account.

To perform an Audit Log Search, follow the steps below.

1. Sign into eCase. Refer to the How to Sign into eCase section.
2. Click on the eCase More menu.
3. Select Audit Log Search in the Management menu. The Audit Log Search becomes available. You can select one or more of the search criteria to be more specific with the audit search.
   
   

   Field	Description
   User Name	Click on the drop down arrow to select an individual user on eCase. If you do not want to search using User Name, keep on the default Any Person.
   Alert Level	Select the required alert level: 1. System Administration – will provide the history of any system level activity, for example creating email templates, document templates or standard line information. 2. Case Management – will track who has opened, closed or created information, for example a case, internal review, ICO appeal or Tribunal. 3. Case Management and Ownership – will include the above and also include when a case has been allocated or reassigned. 4. Case Management, Ownership and Data – will include the above and also include what data has been uploaded, for example files; contributions/quality assurance requested and closed. The details will appear in the Details column. 5. Case Management, Ownership, Data and Access – will include the above, plus who has viewed or managed the case. If you do not want to search using the Alert Level, keep on the default Any Alert Level.
   Event Type	Will allow you to view history for any event or management function, for example closed cases, case reassigned, document templates, email templates, key terms, and standard lines. If you do not want to search using the Event Type, keep on the default Any Event Type.
   Date Period	For the time period you have the option to choose Date Period or Date From-to. You cannot choose both in one search. For the Date Period, there are several options to choose from: · Last 24 hours · Last 7 days · Last 14 days · Last month · Last 3 months If you do not want to search using the Date Period, keep on the default Any Date Period.
   Date From – to	If you do not want to use the Date Period, you can use the search Date From-to. To choose a date, click on the calendar icon. If you do not want to search using Date From – to, leave the fields blank.
   Time From – to	The Time From – to field must be used with the Date From – to field. Select a time by clicking on the drop down arrow. If you do not want to search using the Time From-to, leave the fields set to None.
   Order By	There are two options to choose when ordering the results of the search. You can choose from: · Event Date – this is the default · Case Reference NOTE Use Order Type with Order By to sort the list of results. Decide how you would like the data to be returned on the screen, either Descending or Ascending. This is based on the Order By field chosen. For example, if you would like to see all recent events first, then choose Order by and Descending. Descending is the default for Order Type.

4. Once the search criteria has been selected, click on the Search button to run the search. The results appear at the bottom of the screen. You can move through the information by selecting the page number. If you would like to download the results into a spreadsheet, click on the Download Spreadsheet link.
   
   TIP to view a case, click on the Case Ref link.