Audit logs

How to answer "What users accessed Patient X?"

Required Information

• The patient UUID

Define an event for viewing the specific patient

In the Heap UI, go to Events and in the list of custom events, select Viewed Patient X.

In the event definition section, scroll down to the Edit Event Criteria section, update the patientId filter with the patient ID and click on "UPDATE EVENT".

Query the reports for users who viewed this specific patient

In the Reports/Auditing section, select the Users who have viewed patient X in last three months report.

In the report page that opens up, click on "RUN QUERY" to generate the report and get all the User IDs that have viewed a particular patient.

How to answer "What patients did User Y access?"

Required Information

• The user UUID

Select the report

In the Heap UI, go to the Reports/Auditing section, and select the All patients viewed by user Y in 3 months report.

Update the User ID

In the report detail page, update the userId filter with the UUID of the user to search for and click on "RUN QUERY".

Click on the "SHOW RAW EVENTS" button to view the detailed list of events.

Get Patient IDs

In the list of raw events that shows up, look for the event ViewedPatient. Clicking on it will show detailed properties of that particular event. It should contain a property patientId which indicates the patient whose details this user looked at. Looking over all the events (Don't forget to click on "Show More" to load pages of raw events), the patient IDs viewed by this user can be extracted.