Field Monitoring
Monitor sensitive fields
Keeping sensitive data secure and private is a core concern for most businesses. To add a layer of security, you can monitor important fields and get an email when someone changes a value. For example, you might want to be notified if someone changes your company's IBAN number.
Note
Sending notifications by email requires that you set up the email feature in Business Central.
Set up field monitoring
You can use the Monitor Field Change Setup assisted setup guide to specify the fields that you want to monitor based on filter criteria, such as the data sensitivity classification for the fields. The guide also lets you specify the person who receives an email notification when a change occurs, and the email account that sends the notification. Specify both the user to notify and the account from which to send the notification. After you finish the guide, you can manage settings for field monitoring on the Field Monitoring Setup page.
Note
When you specify the email account from which to send notifications, you must add either the Microsoft 365 or SMTP account types. Notifications should be sent from an account that is not associated with an actual user. Therefore you cannot choose the Current User account type. If you do, notifications will not be sent.
Over time, the list of entries on the Monitored Fields Log Entries page will grow. To reduce the number of entries, you can create a retention policy that will delete entries after a specified period of time.
When you set up field monitoring, or change something in the setup, entries are created for your changes. You can specify whether to display entries related to the monitoring setup by showing or hiding them.
You can manage settings for field monitoring, such as whether to send an email notification or just log the change, for each field on the Monitored Fields Worksheet page. The page is also where you can add or remove fields to monitor.
Note
After you add one or more fields and start monitoring, you must sign out of Business Central and sign in again to apply your settings.
Work with field monitoring
Entries for all changed values for monitored fields are available on the Monitored Fields Log Entries page. For example, entries contain the following information:
The field in which the value changed.
The original and new values.
Who made the change, and when they did so.
To further investigate a change, choose a value to open the page where it was made. To view a list of all entries, choose Field Change Entries.
View field monitoring telemetry
You can set up Business Central to send field monitoring activity to an Application Insights resource in Microsoft Azure. Then, using Azure Monitor, you create reports and set up alerts on the gathered data.
Analyzing Field Monitoring Telemetry
Note
Azure Active Directory is now Microsoft Entra ID.
Keeping sensitive data secure and private is a core concern for most businesses. To add a layer of security, you can monitor important fields when someone changes a value. For example, you might want to know if someone changes your company's IBAN number.
To gather this data, you'll have to start field monitoring and specify the fields that you want to monitor.
Telemetry is then logged for the following operations:
When field monitoring is stopped or started
When a field is added or removed for monitoring (only in version 18.0 and later)
When a field value is changed
Sensitive field monitor status changed
Occurs when the field monitor feature is started or stopped in the company.
General dimensions
Dimension | Description or value |
---|---|
message | Sensitive field monitor status has changed to {almonitorStatus} |
severityLevel | 1 |
user_Id | The user telemetry ID for the user. From the user card, you can use user_Id to identify the user who triggered this telemetry event. |
Custom dimensions
Dimension | Description or value |
---|---|
eventId | AL0000DD3 |
alMonitorStatus | Yes - the field monitor feature was started. No the field monitor feature was stopped. This dimension is called "almonitorStatus" before version 18.0. |
Common custom dimensions
The following table explains other custom dimensions that are common to all field monitoring traces.
Dimension | Description or value |
---|---|
aadTenantId | Note Azure Active Directory is now Microsoft Entra ID. Learn more Specifies the Microsoft Entra tenant ID used for Microsoft Entra authentication. For on-premises, if you aren't using Microsoft Entra authentication, this value is common. |
environmentName | Specifies the name of the tenant environment. See Managing Environments. |
environmentType | Specifies the environment type for the tenant, such as Production or Sandbox. See Environment Types. |
Sensitive field value has changed
Occurs the value of a monitored field has changed in the company.
General dimensions
Dimension | Description or value |
---|---|
message | Sensitive field value has changed: {alfieldCaption} ({alFieldNumber}) in table {altableCaption} ({alTableNumber}) |
severityLevel | 1 |
user_Id | The user telemetry ID for the user. From the user card, you can use user_Id to identify the user who triggered this telemetry event. For more information, see Assign a telemetry ID to users. |
Custom dimensions
Dimension | Description or value |
---|---|
eventId | AL0000CTE |
alFieldCaption | Specifies the name of the field that was changed. This dimension is called "alfieldCaption" before version 18.0. |
alFieldNumber | Specifies the ID of the field that was changed. This dimension was introduced in version 18.0. |
alTableCaption | Specifies the name of the table that includes the changed field. This dimension is called "altableCaption" before version 18.0. |
alTableNumber | Specifies the ID of the table that includes the changed field. This dimension was introduced in version 18.0. |
|
Note
Changes to fields in the following tables are always logged:
Fields in the Field Monitoring Setup table. Many of the fields are included on the Field Monitoring Setup page.
Fields in the Change Log Setup (Field) table. Many of the fields are included on the Field Monitoring Worksheet page.
The Contact Email field in the User table.
Sensitive field added to or removed from monitor
Occurs when a field has been added to or removed from monitoring. This dimension was introduced in version 18.0.
General dimensions
Dimension | Description or value |
---|---|
message | Sensitive field added to monitor: {alfieldCaption} ({alFieldNumber}) in table {alTableCaption} ({alTableNumber}) |
severityLevel | 1 |
user_Id | The user telemetry ID for the user. From the user card, you can use user_Id to identify the user who triggered this telemetry event. For more information, see Assign a telemetry ID to users. |
Custom dimensions
Dimension | Description or value |
---|---|
eventId | AL0000EMW |
alFieldCaption | Specifies the name of the field that was added or removed. |
alFieldNumber | Specifies the ID of the field that was added or removed. |
alTableNumber | Specifies the ID of the table that includes the added or removed field. |
alTableCaption | Specifies the name of the table that includes the added or removed field. |