Submit a ticketCall us

WebinarUpcoming Webinar: Know What’s Changed – with NEW Server Configuration Monitor

Change management in IT is critical. But, even with a good change management process, changes are too often not correctly tracked, if at all. The configuration of your servers and applications is a key factor in their performance, availability, and security. Many incidents can be tracked back to an authorized (and sometimes unauthorized) configuration change, whether to a system file, configuration file, or Windows® Registry entry. Join SolarWinds VP of product management Brandon Shopp to discover how the new SolarWinds® Server Configuration Monitor is designed to help you.

Register now.

Home > Success Center > Orion Platform > Orion - Knowledgebase Articles > Audit Events Query Resource

Audit Events Query Resource

Table of contents

Updated March 20, 2018


You can create a resource to show who is making changes (additions, removals, edits, etc.) in Orion Platform applications.


  • Orion 2017.3 and later


  1. Add a Custom Query resource to the Orion Web Console:vb1.png
  2. Add your query to the resource. An example query is shown below.

SELECT AccountID, AuditEventID, AuditEventMessage, ObservationTimestamp, TimeLoggedUtc FROM Orion.AuditingEvents where AuditEventMessage like '%added%'

An example of the results using where AuditEventMessage like '%added%' is shown below.





Last modified