Field Monitoring

Monitor sensitive fields

Keeping sensitive data secure and private is a core concern for most businesses. To add a layer of security, you can monitor important fields and get an email when someone changes a value. For example, you might want to be notified if someone changes your company's IBAN number.

Note

Sending notifications by email requires that you set up the email feature in Business Central.

Set up field monitoring

You can use the Monitor Field Change Setup assisted setup guide to specify the fields that you want to monitor based on filter criteria, such as the data sensitivity classification for the fields. The guide also lets you specify the person who receives an email notification when a change occurs, and the email account that sends the notification. Specify both the user to notify and the account from which to send the notification. After you finish the guide, you can manage settings for field monitoring on the Field Monitoring Setup page.

Note

When you specify the email account from which to send notifications, you must add either the Microsoft 365 or SMTP account types. Notifications should be sent from an account that is not associated with an actual user. Therefore you cannot choose the Current User account type. If you do, notifications will not be sent.

Over time, the list of entries on the Monitored Fields Log Entries page will grow. To reduce the number of entries, you can create a retention policy that will delete entries after a specified period of time.

When you set up field monitoring, or change something in the setup, entries are created for your changes. You can specify whether to display entries related to the monitoring setup by showing or hiding them.

You can manage settings for field monitoring, such as whether to send an email notification or just log the change, for each field on the Monitored Fields Worksheet page. The page is also where you can add or remove fields to monitor.

Note

After you add one or more fields and start monitoring, you must sign out of Business Central and sign in again to apply your settings.

Work with field monitoring

Entries for all changed values for monitored fields are available on the Monitored Fields Log Entries page. For example, entries contain the following information:

  • The field in which the value changed.

  • The original and new values.

  • Who made the change, and when they did so.

To further investigate a change, choose a value to open the page where it was made. To view a list of all entries, choose Field Change Entries.

View field monitoring telemetry

You can set up Business Central to send field monitoring activity to an Application Insights resource in Microsoft Azure. Then, using Azure Monitor, you create reports and set up alerts on the gathered data.

Analyzing Field Monitoring Telemetry

 

Keeping sensitive data secure and private is a core concern for most businesses. To add a layer of security, you can monitor important fields when someone changes a value. For example, you might want to know if someone changes your company's IBAN number.

To gather this data, you'll have to start field monitoring and specify the fields that you want to monitor.

Telemetry is then logged for the following operations:

  • When field monitoring is stopped or started

  • When a field is added or removed for monitoring (only in version 18.0 and later)

  • When a field value is changed

Sensitive field monitor status changed

Occurs when the field monitor feature is started or stopped in the company.

General dimensions

Dimension

Description or value

Dimension

Description or value

message

Sensitive field monitor status has changed to {almonitorStatus}

severityLevel

1

user_Id

The user telemetry ID for the user. From the user card, you can use user_Id to identify the user who triggered this telemetry event.

Custom dimensions

Dimension

Description or value

Dimension

Description or value

eventId

AL0000DD3

alMonitorStatus

Yes - the field monitor feature was started.

No the field monitor feature was stopped. This dimension is called "almonitorStatus" before version 18.0.

Common custom dimensions

The following table explains other custom dimensions that are common to all field monitoring traces.

Dimension

Description or value

Dimension

Description or value

aadTenantId

Note

Azure Active Directory is now Microsoft Entra ID. Learn more

Specifies the Microsoft Entra tenant ID used for Microsoft Entra authentication. For on-premises, if you aren't using Microsoft Entra authentication, this value is common.

environmentName

Specifies the name of the tenant environment. See Managing Environments.

environmentType

Specifies the environment type for the tenant, such as Production or Sandbox. See Environment Types.

Sensitive field value has changed

Occurs the value of a monitored field has changed in the company.

General dimensions

Dimension

Description or value

Dimension

Description or value

message

Sensitive field value has changed: {alfieldCaption} ({alFieldNumber}) in table {altableCaption} ({alTableNumber})

severityLevel

1

user_Id

The user telemetry ID for the user. From the user card, you can use user_Id to identify the user who triggered this telemetry event. For more information, see Assign a telemetry ID to users.

Custom dimensions

Dimension

Description or value

Dimension

Description or value

eventId

AL0000CTE

alFieldCaption

Specifies the name of the field that was changed. This dimension is called "alfieldCaption" before version 18.0.

alFieldNumber

Specifies the ID of the field that was changed. This dimension was introduced in version 18.0.

alTableCaption

Specifies the name of the table that includes the changed field. This dimension is called "altableCaption" before version 18.0.

alTableNumber

Specifies the ID of the table that includes the changed field. This dimension was introduced in version 18.0.

See common custom dimensions

 

Changes to fields in the following tables are always logged:

  • Fields in the Field Monitoring Setup table. Many of the fields are included on the Field Monitoring Setup page.

  • Fields in the Change Log Setup (Field) table. Many of the fields are included on the Field Monitoring Worksheet page.

  • The Contact Email field in the User table.

Sensitive field added to or removed from monitor

Occurs when a field has been added to or removed from monitoring. This dimension was introduced in version 18.0.

General dimensions

Dimension

Description or value

Dimension

Description or value

message

Sensitive field added to monitor: {alfieldCaption} ({alFieldNumber}) in table {alTableCaption} ({alTableNumber})
or
Sensitive field removed from monitor: {alfieldCaption} ({alFieldNumber}) in table {alTableCaption} ({alTableNumber})

severityLevel

1

user_Id

The user telemetry ID for the user. From the user card, you can use user_Id to identify the user who triggered this telemetry event. For more information, see Assign a telemetry ID to users.

Custom dimensions

 

Dimension

Description or value

Dimension

Description or value

eventId

AL0000EMW

alFieldCaption

Specifies the name of the field that was added or removed.

alFieldNumber

Specifies the ID of the field that was added or removed.

alTableNumber

Specifies the ID of the table that includes the added or removed field.

alTableCaption

Specifies the name of the table that includes the added or removed field.