Tamper-proof audit log of all system actions, permission changes, and data access
This section governs how all system events are logged, including user logins, permission modifications, data exports, and security incidents with full traceability.
Components of the Activity Auditing system
User Session Log
Complete record of all logins, logouts, session durations, and failed authentication attempts.
Permission Audit Trail
Every role assignment, permission change, and access modification with before/after state.
Data Access Log
Record of all data exports, view events, and sensitive data access with requester identity.
Security Incident Log
Structured log of security events: blacklist matches, failed logins, and escalation actions.
Configuration Changes
Audit trail of all system configuration modifications with actor identity and timestamp.
Export & Compliance
Audit-ready exports in CSV, JSON, and PDF formats for ISO 27001, SOC 2, and GDPR audits.
What Activity Auditing controls
Authentication Events
Security- Successful logins with IP address and device
- Failed login attempts with lockout tracking
- Session duration and idle timeout events
- Multi-factor authentication challenges
- Password reset and recovery events
Permission & Access
Authorization- Role assignment and revocation
- Permission modification with before/after state
- Data export requests with requester identity
- Sensitive data access events
- Cross-site access attempts
System & Configuration
Integrity- Configuration changes with actor identity
- Integration modifications
- API key generation and rotation
- System maintenance events
- Backup and restore operations
Detail view of Activity Auditing interfaces
User Session Log
Full-text searchable log of every user session. Each entry shows timestamp, user identity, IP address, device type, login method, and session duration. Filter by user, date range, or event type.
Session log referencePermission Audit Trail
Every role assignment, permission change, and access modification is logged with the performing admin's identity, affected user, timestamp, and before/after state. Changes are irreversible and permanently retained.
Permission audit docs
Data Access Log
Records all data exports, view events, and sensitive data access. Each entry includes requester identity, data category, export format, and destination. Essential for DSAR (Data Subject Access Request) compliance.
Data access referenceSecurity Incident Log
Structured log of security events: blacklist matches, failed authentication attempts, suspicious activity patterns, and escalation actions. Each incident is severity-classified and resolution-tracked.
Security incident docsConfiguration Change Log
Audit trail of all system configuration modifications. Shows what changed, who changed it, when it changed, and the previous value. Critical for change management and rollback procedures.
Configuration auditCompliance Export
Generate audit-ready exports for ISO 27001, SOC 2, and GDPR audits. Exports include the full audit log with hash-chain verification for tamper evidence.
Compliance export guideActivity Auditing permission scope
| Role / Portal | View audit log | View session logs | View permission changes | View data access logs | View security incidents | Export audit data | View configuration changes | Access full history |
|---|---|---|---|---|---|---|---|---|
| Receptionist | ||||||||
| Operations Manager | ||||||||
| Compliance Officer | ||||||||
| IT Administrator | ||||||||
| Super Admin |
Setting up Activity Auditing
- 1
Assign audit log permissions
In the IT Admin Console, assign audit log access permissions to roles that require compliance visibility. Separate permissions exist for viewing session logs, permission changes, and data access logs.
- 2
Configure data retention policy
Set the audit log retention period. Unlike visitor data, audit logs are typically retained longer for compliance purposes. The default is 24 months, configurable up to 84 months.
- 3
Enable security alerting
Configure automated alerts for security events: failed login thresholds, blacklist matches, and suspicious activity patterns. Alerts can be sent via email, SMS, or Slack to security personnel.
- 4
Set up compliance exports
Configure scheduled audit log exports for compliance teams. Select the date range, format (CSV, JSON, PDF), and delivery method. Exports include hash-chain verification for tamper evidence.
- 5
Configure SIEM integration (optional)
Integrate with SIEM systems like Splunk or Sentinel for centralized security monitoring. Configure webhook endpoints for real-time audit event streaming.
- 6
Verify hash-chain integrity
Run the hash-chain verification tool to confirm audit log integrity. The tool validates that no entries have been modified or deleted since creation. Run periodically for compliance verification.
Security and compliance system connections
Splunk
Stream audit log events to Splunk indexes for SIEM correlation and alerting.
Microsoft Sentinel
Azure Sentinel integration for centralized security monitoring and threat detection.
Datadog
Log monitoring and alerting with real-time audit event streaming.
PagerDuty
Route critical security incidents to on-call schedules for immediate response.
Slack
Post security alerts and audit summaries to designated channels.
SFTP
Push audit log exports to any SFTP server on a configurable schedule.
AWS S3
Store audit log exports in S3 buckets for long-term archival and compliance.
REST API
Programmatic audit log access and query via authenticated REST API (v2).
Activity Auditing system constraints
Audit Log
- Default retention period
- 24 months
- Maximum retention period
- 84 months (Enterprise)
- Log entry format
- JSON with hash-chain
- Integrity verification
- SHA-256 hash-chained
- Tamper evidence
- Automatic chain break detection
Search & Export
- Search capabilities
- Full-text, filtered by user/date/event
- Export formats
- CSV, JSON, PDF
- Max export size
- 500,000 entries per export
- Scheduled exports
- Daily, Weekly, Monthly
- Real-time streaming
- Webhook support
Security
- Failed login lockout
- 5 attempts → 30 min lockout
- Session timeout
- Configurable (15 min - 24 hrs)
- IP logging
- Always enabled
- Device fingerprinting
- Supported
- MFA enforcement
- Per-role configurable
Frequently Asked
Questions
Couldn't find what you were looking for?
KaarobaarMeet.ai is a full-stack digital ecosystem OS designed for modern Indian business infrastructure. It powers every touchpoint of visitor check-in, multi-room event scheduling, and enterprise facility operations — replacing physical logbooks with self-service kiosks, encrypted QR passes, instant WhatsApp host alerts, and real-time operations dashboards.
The platform includes 24 modular micro-apps covering Visitor Management, Event Automation, Smart Parking, Smart Badges & Wristbands, Member Directories, Startup Trackers, and Live Command Centers — all accessible under a unified tenant and single sign-on.
Yes. KaarobaarMeet.ai provides an enterprise multi-tenant hierarchy with 13 role-based portals. Corporate headquarters get unified analytics across all cities and branches, while individual security gates, reception desks, and event coordinators operate dedicated local interfaces.
Any standard iPad, Android tablet, touchscreen kiosk terminal, or desktop computer. For physical passes, the system integrates seamlessly with standard thermal printers (Zebra, Brother, TSC) via USB, Bluetooth, or local network.
Pre-registered visitors receive an encrypted QR entry pass directly on WhatsApp prior to arrival. When they arrive and scan in at the reception kiosk or gate, the system alerts the host on WhatsApp instantly with the visitor's photo, designation, and company name.
Review the Activity Auditing configuration guide
Download the audit implementation guide or connect with a solutions architect to scope your compliance and security requirements.
