Audit Logs
A complete, immutable record of every state change in Rona ERP — who did what, when, and what changed. Essential for compliance, debugging, and security monitoring.
IMMUTABLEACTOR + DIFFCOMPLIANCE
Why audit logs matter
- Compliance requirements (FDA, ISO, food safety)
- Security monitoring and incident investigation
- Debugging and troubleshooting
- Accountability and transparency
- Change history for data recovery
- Performance analysis and optimization
What gets logged
Logged events by module
| Inventory | Stock movements, lot creation, item changes |
| Manufacturing | Order lifecycle, batch execution, material consumption |
| Quality | Inspections, lot status changes, quarantine actions |
| Sales | Order creation, fulfillment, invoice generation |
| Finance | Payments, cost recording, invoice status changes |
| Workforce | Attendance, employee changes, shift assignments |
| Admin | User creation, role changes, setting modifications |
Log entry structure
Entry components
| Timestamp | When the event occurred |
| Actor | Who performed the action (user or system) |
| Action | What was done (create, update, delete, etc.) |
| Entity | What was affected (item, order, lot, etc.) |
| Entity ID | Unique identifier of the affected record |
| Changes | Before and after values (diff) |
| Reference | Related entity (e.g., the order for a movement) |
| IP address | Where the action originated |
Example entry
Timestamp: 2026-01-15 14:32:15 UTC Actor: john.doe@company.com Action: UPDATE Entity: inventory.item Entity ID: item-123 Changes: reorderPoint: 50 → 100 reorderQuantity: 200 → 500 IP Address: 192.168.1.100
Searching audit logs
Search filters
| Date range | Filter by time period |
| Actor | Filter by a specific user |
| Action | Filter by action type (create, update, delete) |
| Entity | Filter by entity type (item, order, lot, etc.) |
| Entity ID | Filter by a specific record ID |
| Module | Filter by module (inventory, manufacturing, etc.) |
Change diffs
For update actions, the audit log captures before and after values — exactly what changed, helping with debugging and rollback decisions.
Diff format
status: DRAFT → CONFIRMED plannedQuantity: 100 → 150 expectedYield: 0.95 → 0.90
Immutability
- Prevents tampering with evidence
- Ensures compliance with regulatory requirements
- Maintains trust in the audit trail
- Provides a reliable historical record
Once written, audit log entries cannot be modified or deleted.
Retention policy
Retention options
| 30 days | Minimum retention for basic operations |
| 90 days | Standard retention for most organizations |
| 1 year | Extended retention for compliance |
| 7 years | Long-term retention for regulated industries |
Export and reporting
Export formats
| CSV | Spreadsheet-compatible format |
| JSON | Machine-readable format for integration |
| Human-readable report format |
Security monitoring
Security use cases
| Unauthorized access | Detect logins from unusual locations |
| Privilege escalation | Monitor role changes |
| Data exfiltration | Track large data exports |
| Configuration changes | Monitor setting modifications |
| Failed actions | Track repeated failed attempts |
Security alert example
Multiple failed login attempts from an unknown IP address can indicate a brute force attack. The security team should investigate and potentially block the IP.
Compliance
Compliance requirements
| Food safety (FDA) | Complete traceability and change history |
| ISO 9001 | Quality management system documentation |
| SOX | Financial controls and audit trails |
| GDPR | Data processing records and consent tracking |
| HIPAA | Protected health information access logs |
Continue
Explore Rona AI
Ask the assistant to summarize audit activity, surface anomalies, and generate compliance reports.