Audit trails

Within the OCP, every action is recorded as an audit trail. This allows you to easily track which users performed which actions, when they were performed, and what data fields were affected.

Processing

Audit trails are not directly viewable in the application. They are processed and stored in Azure Blob Storage by a scheduled job named AuditTrailPublish. This job handles the transfer of audit trail data to a dedicated blob storage container, making the data available for later analysis and retrieval.

Lifecycle

We manage these audit trails through an automated data lifecycle policy to balance cost and accessibility. Audit trails that are not accessed for a specified period are automatically moved to lower-cost storage tiers and eventually deleted.

Our data lifecycle management policy follows this scheme, based on the last time an audit trail was accessed:

Condition	Action
Last accessed > 30 days	Moved to the Cool access tier.
Last accessed > 90 days	Moved to the Cold access tier.
Last accessed > 360 days	Automatically deleted.

This policy ensures that frequently accessed audit trails remain readily available, while older, less-needed data is stored more cost-effectively and eventually removed in compliance with our data retention policies.