Audit trails

Within the OCP, every action is recorded as an audit trail. This allows you to easily track which users performed which actions, when they were performed, and what data fields were affected.

Processing

Audit trails are not directly viewable in the application. They are processed and stored in Azure Blob Storage by a scheduled job named AuditTrailPublish. This job handles the transfer of audit trail data to a dedicated blob storage container, making the data available for later analysis and retrieval.

Lifecycle

We manage these audit trails through an automated data lifecycle policy to balance cost and accessibility. Audit trails remain in the Hot access tier and are deleted based on the time since they were last modified.

Our data lifecycle management policy follows this scheme, based on the last time an audit trail was modified:

Condition	Action
Last modified > 360 days	Automatically deleted.

This policy keeps audit trails immediately available without incurring per-object tier-transition costs. Because published audit trails are not normally modified, the modification date represents the age of the audit record. Reading an audit trail does not extend its retention period.