Objective
How to check the Audit Log for changes in the Protect licensing status (Licensed / Un-licensed) for a given server.
Process
The Audit Log can be accessed in the Contrast UI through Organisation Settings >> Security >> View Audit Log (Located on the righthand side of the screen). For EOP environments the file can also be found at Contrast\data\logs\audit.log . The following entries will be recorded in the Audit Log when a server is Licensed or Un-Licensed for Protect.
Licensing a server:
Protection License applied to server: 'SERVERNAME' (auto-licensing)
Protection License applied to server: 'SERVERNAME' by user@emailaddress.com
Un-licensing a server:
With automatic Server cleanup enabled. The example is for a Production server with automatic server clean up set to 3 days:
Server 'SERVERNAME'(Production) disabled automatically due to inactivity(3-DAYS)
Protection License removed from server: 'SERVERNAME' by (cleanup-policy)
Manually:
Protection License removed from server: 'SERVERNAME' by user@emailaddress.com