Track File Downloads with more control

[Richard.Rankin]

For Security reasons, it can be necessary to track who downloads files from the Vault.

Already Vault has the ability to track who downloads these files. See :

How to track downloaded or deleted files in Vault

However, when this is switched on it tracks all file downloads. It also logs the downloads in the vlog along with other logs. This makes it very difficult to determine if someone is downloading more files than they should be.

The request, is to enhance this feature by.

1) Outputing file downloads to a separate log file

2) Allowing an Administrator to choose what type of file downloads are tracked. They might choose to only track downloads for Get operations and ignore "in-Vault client" operations such as Copy Design or a property edit.

[tim_gladdy]

It would be good if Vault could create alerts and reports on users that are getting large numbers of files from Vault over a short period of time.

If a user is normally accessing 20 files a day and this increases to to say 2,000 files a day and is maintained over a number of days, this should lead to concerns with regards to what that user is doing with the files.

It could be legitimate work or it could be data gathering activities to unlawfully share this data outside of the company.

As Vault has no restrictions on how mane files you can get from Vault and what you can do with them once you have with them, this should be considered as a security risk to the business.

Activity log files are kept on file store activities and actions are recorded when files are taken from Vault, so this data could be monitored and reported on.

[Anonymous]

I fully support the idea to be able to trace download and delete activities.

[mflayler]

To add upon this...the reality would be to have a better interaction of the Audit Log in the Vault Client for users to see who has grabbed some files but has not done anything with them.  The vlog is a good start but it does not fully solve the problem.

[Senthil_Kumar]

This is implemented in Vault 2021. For more info on Vault 2021 What's new please refer this page - What's New in Vault 2021