Viewing the Audit Trail Page

To navigate to the Audit Trail page, complete the following steps:

1. In the HPE Aruba Networking Central landing page, click the menu icon to open the Menu page.

2. In the Audit Trail card, click the View option.

Figure 1: Audit Trail Table (with Source IP Address Column Disabled)



The following table describes the columns in the Audit Trail table.


Table 1: Audit Trail Table Column Details

Column	Description
Occurred On	Displays the timestamp of the log in the mm/dd/yyyy, hh:mm:ss AM/PM format.
Action	Displays the action performed by the executed operation.
Category	Displays the category of the executed action like Configuration, Subscription, and so on.
Sub-category	Displays the sub-category of the executed action like Scopes, Roles, and so on.
Destination	Displays the name of the entity or component on which the action was performed.
Destination Name	Displays the name of the destination. For example if the Destination was Device, the Destination Name is the device hostname.
Description	Displays the details of the executed action.
Source	Displays the email ID of the user who has executed the operation.
Source IP Address	Displays the IP Address of the user who has executed the operation (hidden by default).

Figure 2: Audit Trail Table (with Source IP Address Column Enabled)



The Audit Trail page also has the following options:

• Search bar—Used to filter the data using search terms (not case sensitive).

  Note:

  The search bar does not support search terms on the basis of Category, Sub-Category, or Destination. To search for data using these parameters, use the Filters pop-up.

• Item count—Displays the number of items in the Audit Trail table, based on the set filters, below the search bar.

• Filters—Used to open a Filters pop-up to filter the data in the Audit Trail table. For more information, see Filtering Data in the Audit Trail Table.

• Time Range Selector—Used to change the time range for the data by clicking Actions button and selecting one of the available options: 3 hours, 1 day, 7 days, 30 days, and 90 days. By default, the time range is set to 3 hours.

• Play/Pause—Used to start or stop the live polling of data in the Audit Trail table by clicking the play or pause icon, respectively. Polling of data occurs at intervals of one minute, and data is displayed with infinite scrolling.

• Customize Columns—Used to adjust column visibility and position in the Audit Trail table. For more information, see Table Utilities.

• View Details—Used to view more details of an audit trail entry by hovering over the entry, clicking the Ellipsis icon, and the clicking View Details. A pop-up opens and dislays further details. For more information, see Configuration Update Audit Logs.

  Note:

  The View Details option is only displayed (on hover) for rows corresponding to a configuration update.

  Note:

  For creation or deletion configuration updates:

  • Created values are displayed with a green background under a standalone Create section.

  • Deleted values are displayed with a red background under a standalone Delete section.

Attention When version 3.0.4.0 becomes available for download, all deployments must be upgraded to 3.0.4.0 before September 30, 2026 to ensure uninterrupted service. All applications and services will be automatically shut down on September 30, 2026, at 12:00 AM UTC. Beginning October 31, 2026, deployments running earlier versions will no longer be supported. As part of this transition, core platform components are updated in version 3.0.4.0. Failure to complete the upgrade by the specified date will result in the automatic shutdown of all applications and services, and the WebUI will become inaccessible. Devices will not be served and network connectivity will be impacted. If you have not upgraded by September 30, 2026, contact the TAC team to upgrade before October 31, 2026. Starting October 31, 2026, users will have to perform a fresh installation of the setup. Starting August 01, 2026, an Action Required pop‑up notification will appear upon login, reminding to complete the upgrade. This reminder will be displayed once per session. In addition, alerts and audit trails will be sent weekly until one week prior to the shutdown date. During the final week, alerts and audit trails will be sent daily. Figure 3: Action Required Pop-up Window for Users with Read-only Access Users with read-only access should contact the network administrator to upgrade their deployments. Figure 4: Action Required Pop-up Window for Users with Upgrade Access Users with upgrade access can upgrade their deployments by clicking Go to Version in the Action Required pop-up notification.