Monitoring & Audit
Monitoring & Audit enables you to see what the platform is currently doing and to prove what it did in the past. It covers the live view of running instances and the tiCrypt Audit platform, a standalone service that ingests secure logs from your deployment and turns them into queries, reports, alerts, and charts.
Monitoring and audit answer different questions. Monitoring is about now: which VMs are running, which drives are mounted, which nodes are healthy. Audit is about the record: who accessed what, when, and under which project classification.
Monitoring & Audit contains the following functionality
- Queries: search, run, and export individual audit queries, with a TOML-based builder and parameter autocomplete.
- Reports: run pre-built and custom audit reports over a date range.
- Alerts: monitor and filter system alerts by severity, type, or user.
- Management: manage audit users, invitations, tokens, saved reports, queries, and uploads.
- Instances: the live view of running VMs, past VMs, drives, service VMs, and NFS mounts.
- Audit Service: deploy, configure, and update the audit backend.
Who uses tiCrypt Audit
- Compliance officers reviewing system activity for regulatory reporting.
- System administrators monitoring alerts and investigating incidents.
- Principal investigators auditing project-level activity.
- Security teams analysing login patterns, permission changes, and data access.
Main navigation
After logging in, the navigation bar provides access to the following sections:
| Tab | Description | Access |
|---|---|---|
| Alerts | View and filter system alerts by severity, type, or user | All users |
| Reports | Run pre-built and custom audit reports with date ranges | All users |
| Queries | Search, run, and export individual audit queries | All users |
| SQL | Direct SQL viewer for advanced query authoring | Admin only |
| Management | Manage users, invitations, tokens, reports, queries, and uploads | Admin only |
Key capabilities
- Pre-built queries and reports covering common audit scenarios
- Custom query authoring with a TOML-based query builder and SQL generation
- Parameterized queries with autocomplete for users, teams, projects, and other objects
- Alert monitoring with severity-based filtering (Info, Low, Medium, High, Critical)
- Data export to Excel with formatting and column statistics
- Chart visualization including line, bar, pie, and geographic map charts
- Object detail inspection for users, teams, files, drives, VMs, and IP addresses
- Role-based access control separating admin and standard user capabilities
- API access tokens for programmatic integration
Before you begin
- You have received an invitation link from your tiCrypt Audit administrator.
- You have registered an account by following that link and setting a password.
- The audit service is deployed and ingesting logs. See Audit Service.
Start with the Alerts tab to review recent activity, or go to Reports to run a pre-built audit report.
Alerts
Severity-filtered system alerts.
Reports
Pre-built and custom audit reports over a date range.
Queries
Search, run, and export individual audit queries.
Management
Audit users, invitations, tokens, and saved artefacts.
Instances
Running VMs, past VMs, drives, and service VMs.
Audit Service
Deploy, configure, and update the audit backend.