It would be nice if, for tag value changes, there was another column in the AUDIT_EVENTS table that would store the tag value that it was changed from. We’ve had a couple of incidents where someone changed a value or changed a wrong value by accident and it was easy to find out who did it but not what the original value was.
I am with you that would be a nice feature.
I hope this help somebody.
ae.event_timestamp AS Time,
ae.actor AS User,
ae.action AS Action,
ae.action_value AS Value,
case when ae.action=‘tag write’ then
(select oae.action_value from AUDIT_EVENTS oae where oae.action=ae.action and oae.action_target=ae.action_target and oae.EVENT_TIMESTAMP<ae.EVENT_TIMESTAMP order by oae.EVENT_TIMESTAMP desc LIMIT 1)
else ‘’ end as oldValue,
ae.action_target AS Target,
ae.actor_host AS Host,
ae.status_code AS ‘Status Code’,
ae.originating_system AS ‘System’,
FROM AUDIT_EVENTS ae
This feature should be in it from the begining…