Submit a ticketCall us

AnnouncementsTHWACKcamp 2018 is here

2018 is the seventh year for THWACKcamp™, and once again we’ll be live October 17 – 18 with packed session tracks covering everything from network monitoring and management, to change control, application management, storage, cloud and DevOps, security, automation, virtualization, mapping, logging, and more.

Register for online sessions.

Home > Success Center > Orion Platform > Orion - Knowledgebase Articles > Audit Events Query Resource

Audit Events Query Resource

Table of contents

Updated March 20, 2018


You can create a resource to show who is making changes (additions, removals, edits, etc.) in Orion Platform applications.


  • Orion 2017.3 and later


  1. Add a Custom Query resource to the Orion Web Console:vb1.png
  2. Add your query to the resource. An example query is shown below.

SELECT AccountID, AuditEventID, AuditEventMessage, ObservationTimestamp, TimeLoggedUtc FROM Orion.AuditingEvents where AuditEventMessage like '%added%'

An example of the results using where AuditEventMessage like '%added%' is shown below.





Last modified