Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Keeping sensitive data secure and private is a core concern for most businesses. To add a layer of security, you can monitor important fields and get an email when someone changes a value. For example, you might want to be notified if someone changes your company's IBAN number.

Info

Note

Sending notifications by email requires that you set up the email feature in Business Central.

...

Set up field monitoring

You can use the Monitor Field Change Setup assisted setup guide to specify the fields that you want to monitor based on filter criteria, such as the data sensitivity classification for the fields. For more information, see Classifying Data Sensitivity. The guide also lets you specify the person who receives an email notification when a change occurs, and the email account that sends the notification. Specify both the user to notify and the account from which to send the notification. After you finish the guide, you can manage settings for field monitoring on the Field Monitoring Setup page.

Info

Note

When you specify the email account from which to send notifications, you must add either the Microsoft 365 or SMTP account types. Notifications should be sent from an account that is not associated with an actual user. Therefore you cannot choose the Current User account type. If you do, notifications will not be sent.

Over time, the list of entries on the Monitored Fields Log Entries page will grow. To reduce the number of entries, you can create a retention policy that will delete entries after a specified period of time. For more information, see Define Retention Policies.

When you set up field monitoring, or change something in the setup, entries are created for your changes. You can specify whether to display entries related to the monitoring setup by showing or hiding them.

You can manage settings for field monitoring, such as whether to send an email notification or just log the change, for each field on the Monitored Fields Worksheet page. The page is also where you can add or remove fields to monitor.

Info

Note

After you add one or more fields and start monitoring, you must sign out of Business Central and sign in again to apply your settings.

Work with field monitoring

...

Analyzing Field Monitoring Telemetry

  • Article

  • 11/13/2023

  • 5 contributors

Feedback

In this article

  1. Sensitive field monitor status changed

  2. Sensitive field value has changed

  3. Sensitive field added to or removed from monitor

  4. See also

APPLIES TO: Business Central 2020 release wave 2 (update 17.1) and later

Info

Note

Azure Active Directory is now Microsoft Entra ID.

Learn more

Keeping sensitive data secure and private is a core concern for most businesses. To add a layer of security, you can monitor important fields when someone changes a value. For example, you might want to know if someone changes your company's IBAN number.

To gather this data, you'll have to start field monitoring and specify the fields that you want to monitor. For more information, see Auditing Changes in Business Central - Monitoring Sensitive Fields in the Application help.

Telemetry is then logged for the following operations:

...

Occurs when the field monitor feature is started or stopped in the company.

General dimensions

...

Dimension

Description or value

message

Sensitive field monitor status has changed to {almonitorStatus}

severityLevel

1

user_Id

The user telemetry ID for the user. From the user card, you can use user_Id to identify the user who triggered this telemetry event.

For more information, see Assign a telemetry ID to users.

Custom dimensions

Expand table

Dimension

Description or value

eventId

AL0000DD3

alMonitorStatus

Yes - the field monitor feature was started.

No the field monitor feature was stopped. This dimension is called "almonitorStatus" before version 18.0.

Common custom dimensions

The following table explains other custom dimensions that are common to all field monitoring traces.

Expand table

Dimension

Description or value

aadTenantId

Note

Azure Active Directory is now Microsoft Entra ID. Learn more

Specifies the Microsoft Entra tenant ID used for Microsoft Entra authentication. For on-premises, if you aren't using Microsoft Entra authentication, this value is common.

environmentName

Specifies the name of the tenant environment. See Managing Environments.

environmentType

Specifies the environment type for the tenant, such as Production or Sandbox. See Environment Types.

Sensitive field value has changed

Occurs the value of a monitored field has changed in the company.

General dimensions

Expand table

Dimension

Description or value

message

Sensitive field value has changed: {alfieldCaption} ({alFieldNumber}) in table {altableCaption} ({alTableNumber})

severityLevel

1

user_Id

The user telemetry ID for the user. From the user card, you can use user_Id to identify the user who triggered this telemetry event. For more information, see Assign a telemetry ID to users.

Custom dimensions

...

Dimension

Description or value

eventId

AL0000CTE

alFieldCaption

Specifies the name of the field that was changed. This dimension is called "alfieldCaption" before version 18.0.

alFieldNumber

Specifies the ID of the field that was changed. This dimension was introduced in version 18.0.

alTableCaption

Specifies the name of the table that includes the changed field. This dimension is called "altableCaption" before version 18.0.

alTableNumber

Specifies the ID of the table that includes the changed field. This dimension was introduced in version 18.0.

See common custom dimensions

Info

Note

Changes to fields in the following tables are always logged:

...

Occurs when a field has been added to or removed from monitoring. This dimension was introduced in version 18.0.

General dimensions

Expand table

Dimension

Description or value

message

Sensitive field added to monitor: {alfieldCaption} ({alFieldNumber}) in table {alTableCaption} ({alTableNumber})
or
Sensitive field removed from monitor: {alfieldCaption} ({alFieldNumber}) in table {alTableCaption} ({alTableNumber})

severityLevel

1

user_Id

The user telemetry ID for the user. From the user card, you can use user_Id to identify the user who triggered this telemetry event. For more information, see Assign a telemetry ID to users.

Custom dimensions

...

Dimension

Description or value

eventId

AL0000EMW

alFieldCaption

Specifies the name of the field that was added or removed.

alFieldNumber

Specifies the ID of the field that was added or removed.

alTableNumber

Specifies the ID of the table that includes the added or removed field.

alTableCaption

Specifies the name of the table that includes the added or removed field.