Auditing in SalaX Secure Messaging

Overview

Auditing refers to the process of reviewing and tracking activities within a system at a specific point in time.
In SalaX Secure Messaging, we provide comprehensive capabilities to audit an entire SalaX Secure Messaging installation, ensuring transparency, accountability, and compliance with operational and security standards.

Auditing is enabled per deployment. Once enabled, all audited messages are securely stored in an encrypted format in the database. The auditing mechanism leverages the same end-to-end encryption technology as SalaX Secure Messaging, ensuring that message confidentiality and integrity are preserved.

Once the auditing infrastructure is deployed and configured, an "Audit" menu becomes available in the Admin UI.

Note: Attachments are not included in the audit logs. Also, its possible to configure Audit so that:

1. Only room events are audited
2. Both room events and messages are audited.

This menu provides the following key features:

1. Add new rooms for auditing
2. View a list of audited rooms
3. Search through audited rooms

The following sections describe these features in detail.

1. Add a New Room for Auditing

To start auditing a new room:

1. Click “Audit New Rooms”.
2. A popup window will open displaying the list of available rooms on the server.
3. Use the search bar to locate the room you want to audit.
4. Select the room from the list.
5. Click “Add”.
6. Once successfully added, a confirmation popup will appear indicating that the room is now under auditing.

2. List of Audited Rooms

The Audited Rooms List displays all rooms that are currently being audited.

• Clicking any room in the list opens its Room Details Page, which provides detailed information about the room’s audit configuration and activity.
• You can select one or more rooms from the list to perform the following actions:

Available Actions

1. Stop Auditing Rooms
   This action halts the auditing process for the selected rooms.

2. Export Audit Logs
   You can export the audit logs for selected rooms in various formats for external review or archiving.
   

   • Date Range Selection: Choose the specific time range for which you want to export logs.
   • Available Export Formats:
     • JSON
     • HTML
     • Text
     • CSV

3. Search Audited Rooms

The Search Bar at the top of the Auditing interface allows administrators to quickly locate rooms that are already under auditing.
You can search by room name, identifier, or any associated metadata.

Security and Compliance Notes

• All audit data is encrypted at rest and in transit, maintaining the same high security standards as SalaX Secure Messaging communications.
• Access to audit data is restricted to authorized administrators as defined in the deployment configuration.
• It is the responsibility of the organization exporting the audit logs to ensure that the exported data is securely stored in accordance with applicable organizational policies and regulatory requirements.

Summary

The auditing functionality in SalaX Secure Messaging provides administrators with a robust and secure mechanism to monitor, review, and export communication activities within their deployment.
By leveraging strong encryption and intuitive administrative tools, the auditing feature ensures both accountability and data protection across all audited rooms.