Audit Trail
The Audit Trail feature records and tracks all activities occurring in the system. All activities such as user login/logout, setting changes, and system administration tasks are recorded and can be utilized for security audits and system monitoring.
-
Security audit: Detect unauthorized access attempts or privilege abuse.
-
Troubleshooting: Track the occurrence of system errors and setting change history.
-
Compliance: Retain access logs and generate audit reports.
Use audit trail
-
Click Settings on the Launcher page.
-
Click System → Audit Trail on the left sidebar.
-
The audit trail list appears on the screen.

For more information on major tracking items, refer to the following.
Types of tracked actions
Click Action option in the Filter section to categorize audit trails by the following action types.

-
Add: Create new item
-
Update: Modify existing item
-
Delete: Remove item
-
Action: Execute system functions (login, device control, etc.)
Classification by permission level
Audit trails can be categorized according to admin level. Click Account Level option in the Filter section to filter by the following permission levels.
-
Administrator(1): Access all system functions
-
User Operator(2): User management functions
-
Monitoring Operator(3): Monitoring functions
-
Video Operator(253): Video-related functions
-
TA Operator(254): Attendance management functions
Video Operator(253) and TA Operator(254) permission levels are available through additional options for Advanced license or higher. For more information on licensing policy, refer to the following.
Period setting query
Set the period to check the audit trail history for a specific duration.
Query with predefined periods
Select Last 1 Month or Last 3 Months from the filter list on the left screen.

Query with custom periods
For detailed period settings, set the start date and end date in the Filter section under the Datetime option.

Filter settings
Filter the audit trail list efficiently using various criteria.

In the Filter section, you can set the following options. Filter options match the column items of the audit trail list. However, the Modification column cannot be filtered.
-
Datetime: Date and time when the event occurred
-
USER: User ID of the user who performed the event
-
Account Level: User's permission level
-
IP: IP address from which the user accessed
-
Category: Menu category of the modified item
-
Target: Modified target
-
Action: Performed action
-
Modification: Details during the event occurrence
Save filter
Set the filter and click the Filter section's Save Filter button to save the filter you set to the filter list on the left screen.

-
Click to edit the filter name. Enter the filter name and press Enter to change the filter name.
-
Click to delete the filter. The filter will be removed from the filter list.
Page navigation
Move between pages or set the number of items to appear on each page.
-
: Go to the first page. -
: Go to the previous page. -
: Enter the page number to navigate to and press Enter to go to that page. -
: Go to the next page. -
: Go to the last page. -
: You can select the number of items to display per page.
Export to CSV
Export the audit trail list to a CSV file for use with external analysis tools.
-
In the Filter section, set filters if needed.
-
Click → CSV Export on the right side of the section.
If you have set filtering, only the filtered results will be exported to the CSV file.
Set columns

You can change the positions of columns or hide them in the audit trail list. Click → Column Setting on the far right of the Filter section.
-
Uncheck the checkbox of the item you wish to hide from the column list.
-
To change the order of the columns, you can drag the desired items to a new position.
-
To initialize the column settings, click the Default Column button.
Click the Apply button to save the settings.
Major tracking items
All activities recorded in the audit trail are organized by category. Click each item to check the details.
System Access
-
Login: Login (ID+Password)
-
Multi-factor login: Login (ID+Password+Fingerprint)
-
Logout: Logout
-
Exceeded login attempts: Exceeded maximum login attempts
User Information
-
Basic Info: Name, User ID, Login ID, Email, Phone
-
Authentication Information: Password, PIN, Fingerprint Template, Face, Cards
-
Permissions and Groups: Account Level, Access Groups, User Group, Private Auth Modes
-
User Status: Status, Start Datetime, Expiry Datetime
-
Data Management: CSV Import, CSV Export, Data file Import, Data file export
-
Device Integration: Transfer To Device, Delete From Device
-
Others: Photo, Custom Fields, 1:1 Security Level, Print
-
Management: CSV Export Long-term Idle Users, Delete Long-term Idle Users, Face Migration, Face Import
-
Email Functions: Sending Email Succeeded, Sending Email Failed
Access Control
-
Door Settings: Name, Description, Door Group
-
Door Devices: Entry Device, Exit Device, Relay, Door Sensor, Exit Button
-
Door Control: Door Open Duration, Door Open Once, Door Open Timeout, Dual Authentication, Use Automatic Door
-
Door Actions: Lock, Unlock, Release, Open, Clear Alarm, Clear APB, Clear APB, Clear Timed APB
-
Access Groups: Name, Description, Access Levels, User Groups, Users
-
Access Levels: Name, Description, Access Level
-
Elevator Settings: Name, Description, Elevator Group, Floors, Open Time
-
Elevator Devices: Controller, Reader, Module, Tamper
-
Elevator Control: Dual Authentication, Trigger & Action
-
Elevator Actions: Lock, Unlock, Release, Open, Clear Alarm, Clear APB
-
Floor Levels: Name, Description, ID, Floor Level
Device Management
-
Device Basic Settings: Name, Device Group, Time Zone
-
Authentication Settings: Authentication, Fingerprint, Face, Card
-
Interface Settings: Display, Image Log, Image Log
-
Communication Settings: TCP/IP, Device to Server Connection, RS485, WLan, Wiegand, Wiegand IO, USB, VOIP
-
Function Settings: System, TNA, Trigger & Action, Camera Frequency
-
User Management: Manage Users
-
Device Control: Connect, Disconnect, Sync Device, Delete Data & Sync Device, Discover Wiegand Device
-
System Management: Factory Default, Reboot, Firmware Upgrade, Time Sync with Server, Send License File
-
Device Status: Locked, Clear Alarm, Delete
Advanced Access Control
-
Advanced Access Control Basic Settings: Name, Description, Zone Type, Active/Inactive, Mode
-
Anti-passback: APB, Clear APB, Clear APB
-
Fire Alarm: Fire Alarm
-
Schedule Control: Scheduled Lock, Scheduled UnLock
-
Occupancy Management: Count +1, Count -1, Count Modified
-
Advanced Access Control Actions: Lock, Unlock, Release, Open, Clear Alarm
System Settings
-
Server Settings: BioStar X IP Address, BioStar X Port, Web Server Protocol, Session Timeout
-
Security Settings: Secure communication with device, Password Level, Server Matching
-
Sync Settings: Log Upload, Automatic User Synchronization
-
Device Settings: Enrollment Device, Fingerprint Template Format, Mobile Card Enrollment, Use User Photo
-
Licenses: License
-
Default settings: Language, Date Format, Time Format, Time Zone
-
Schedule settings: Name, Description, ID, Schedule, Holiday, Start Date, Type, Cycle
-
Holiday settings: Name, Description, Holiday
-
Alert settings: On, Off
-
Image log settings: Preset, Delete Option
-
Mobile credentials: Use, Not Use
Advanced security settings
-
Smart card - DESFire: DESFire App ID, DESFire File ID, DESFire Encryption Type, DESFire Primary Key, DESFire Secondary Key
-
Smart card - iClass: iClass Primary Key, iClass Secondary Key, iClass Start Block Index
-
Smart card - MIFARE: MIFARE Primary Key, MIFARE Secondary Key, MIFARE Start Block Index, Use MIFARE Primary Key, Use MIFARE Secondary Key
-
Smart card - Mobile: Mobile Primary Key, Mobile Secondary Key
-
Smart card - Standard: Name, Number of Template, Template Size, Use Secondary Key
-
Wiegand settings: Name, Description, ID, Total Bits, ID Fields, Parity Bits, Parity Position, Parity Type, Facility Code
-
Trigger conditions and actions: Name, Trigger, Action, Schedule
-
Custom permissions: Name, Description, ID, Operator, Permission
-
Custom fields: Name, ID
-
Signal settings: Name, Delay, Count, On, Off
Data management
-
System backup: System Backup
-
Video management: Camera, Rule
-
Visitor management: Visitor, Visitor Setting
-
Port management: Port
-
Daylight saving time: Daylight Saving Time
-
Custom interface: Custom Interface