Logging and SQL databases

System log file

On the computer where you have installed the Management Server system component, you can find the system log file for XProtect Incident Manager. The location of the system log file is C:\ProgramData\Milestone\XProtect Incident Manager\Logs. Consult the log file if you need to troubleshoot system errors.

Logging of user activity in Management Client and XProtect Smart Client

XProtect Incident Manager stores detailed records of user activity in SQL databases.

When administrators in Management Client create, enable, and edit incident properties, these activities are written to the log server's SQL database SurveillanceLogServerV2.

When operators of XProtect Smart Client create and edit incident projects, the activities are written to XProtect Incident Manager's own SQL database named Surveillance_IM, to the log server's SQL database SurveillanceLogServerV2, or to both SQL databases.

Where the activities are logged depends on the specific activity.

Who and where	Activity	Activity logged in
Who and where	Activity	Surveillance_IM	SurveillanceLogServerV2
Administrators in Management Client	Define, edit, and delete all incident properties and settings related to XProtect Incident Manager.	No	Yes
Operators in XProtect Smart Client	Create and delete incident projects. Generate and print incident reports.	Yes	Yes
	Open and export incident projects.	Yes	No
	Edit incident projects. For example, apply or change incident types, statuses, categories, and data, and add comments or information about calls.	Yes	No
	Create and remove sequences. Add and remove sequences to/from incident projects.	Yes	No

The Surveillance_IM database is located on the same SQL Server installation as the SQL database for the Management Server service. If you move the SQL database for the Management Server service, you must move the Surveillance_IM database to the same location. You can move and back up the Surveillance_IM database the same way as you do with other SQL databases.