Audit reports contain records of user activity performed on the selected backup server for the specified period. Users with the Portal Administrator role can generate audit reports for backup servers added to the Veeam Backup Enterprise Manager infrastructure. For more information, see Generating Audit Report.
Audit Report Overview
Audit reports include the following details about user activity:
- Date and time when a user performed an operation
- User name
- User security identifier (SID)
- Name of the operation initiated by the user
For more information on operations included in the report, see Audited Operations.
- Operation result
- Details on the performed operation
When you generate an audit report, it is downloaded in the CSV format to the local machine.
The generated file is also saved on the Enterprise Manager machine. Enterprise Manager does not clean up these files. You can find all reports in the following folder: %ProgramData%\Veeam\Backup\WebRestore.
To generate an audit report:
- Log in to Enterprise Manager using an administrative account.
- To open the Configuration view, click Configuration in the top right corner.
- In the Backup Servers section, select a backup server whose report you want to export.
- Click Audit report.
- In the Audit Report window, specify a time period covered by the report and click Generate.
The report contains only the audit records whose retention period is not expired. The retention period is defined by the Event history setting of Enterprise Manager. For more information on retention settings, see Configuring Retention Settings for Index and History.