Analyzing Field Monitoring Telemetry

APPLIES TO: Business Central 2020 release wave 2 (update 17.1) and later

Note

Azure Active Directory is now Microsoft Entra ID. Learn more

Keeping sensitive data secure and private is a core concern for most businesses. To add a layer of security, you can monitor important fields when someone changes a value. For example, you might want to know if someone changes your company's IBAN number.

To gather this data, you'll have to start field monitoring and specify the fields that you want to monitor. For more information, see Auditing Changes in Business Central - Monitoring Sensitive Fields in the Application help.

Telemetry is then logged for the following operations:

• When field monitoring is stopped or started
• When a field is added or removed for monitoring (only in version 18.0 and later)
• When a field value is changed

Sensitive field monitor status changed

Occurs when the field monitor feature is started or stopped in the company.

General dimensions

Dimension	Description or value
message	Sensitive field monitor status has changed to {almonitorStatus}
severityLevel	1
user_Id	The user telemetry ID for the user. From the user card, you can use user_Id to identify the user who triggered this telemetry event. For more information, see Assign a telemetry ID to users.

Custom dimensions

Dimension	Description or value
eventId	AL0000DD3
alMonitorStatus	Yes - the field monitor feature was started. No the field monitor feature was stopped. This dimension is called "almonitorStatus" before version 18.0.

Common custom dimensions

The following table explains other custom dimensions that are common to all field monitoring traces.

Dimension	Description or value
aadTenantId	Note Azure Active Directory is now Microsoft Entra ID. Learn more Specifies the Microsoft Entra tenant ID used for Microsoft Entra authentication. For on-premises, if you aren't using Microsoft Entra authentication, this value is common.
environmentName	Specifies the name of the tenant environment. See Managing Environments.
environmentType	Specifies the environment type for the tenant, such as Production or Sandbox. See Environment Types.

Sensitive field value has changed

Occurs the value of a monitored field has changed in the company.

General dimensions

Dimension	Description or value
message	Sensitive field value has changed: {alfieldCaption} ({alFieldNumber}) in table {altableCaption} ({alTableNumber})
severityLevel	1
user_Id	The user telemetry ID for the user. From the user card, you can use user_Id to identify the user who triggered this telemetry event. For more information, see Assign a telemetry ID to users.

Custom dimensions

Dimension	Description or value
eventId	AL0000CTE
alFieldCaption	Specifies the name of the field that was changed. This dimension is called "alfieldCaption" before version 18.0.
alFieldNumber	Specifies the ID of the field that was changed. This dimension was introduced in version 18.0.
alTableCaption	Specifies the name of the table that includes the changed field. This dimension is called "altableCaption" before version 18.0.
alTableNumber	Specifies the ID of the table that includes the changed field. This dimension was introduced in version 18.0.
See common custom dimensions

Note

Changes to fields in the following tables are always logged:

• Fields in the Field Monitoring Setup table. Many of the fields are included on the Field Monitoring Setup page.
• Fields in the Change Log Setup (Field) table. Many of the fields are included on the Field Monitoring Worksheet page.
• The Contact Email field in the User table.

Sensitive field added to or removed from monitor

Occurs when a field has been added to or removed from monitoring. This dimension was introduced in version 18.0.

General dimensions

Dimension	Description or value
message	Sensitive field added to monitor: {alfieldCaption} ({alFieldNumber}) in table {alTableCaption} ({alTableNumber}) or Sensitive field removed from monitor: {alfieldCaption} ({alFieldNumber}) in table {alTableCaption} ({alTableNumber})
severityLevel	1
user_Id	The user telemetry ID for the user. From the user card, you can use user_Id to identify the user who triggered this telemetry event. For more information, see Assign a telemetry ID to users.

Custom dimensions

Dimension	Description or value
eventId	AL0000EMW
alFieldCaption	Specifies the name of the field that was added or removed.
alFieldNumber	Specifies the ID of the field that was added or removed.
alTableNumber	Specifies the ID of the table that includes the added or removed field.
alTableCaption	Specifies the name of the table that includes the added or removed field.
See common custom dimensions

See also

Changelog configuration telemetry Monitoring and Analyzing Telemetry
Enable Sending Telemetry to Application Insights
Alert on telemetry