Event disappearances and modifications
Actions carried out on calendar events (creation, modification, deletion) are logged on the server in the /var/log/bm/audit directory, in folders each corresponding to a calendar.
File names have the following format audit-<calendar uid>@domain.log
E.g., the file for user John Doe's calendar on our demo server is called: audit-calendar:Default:9E3C96CA-2E46-41A9-9E88-D774F9DFBBA5@bluemind.loc.log
uid and user ID
If you know a user's identifier, you can use the bm-cli tool to obtain its uid directly from the server:
# bm-cli user get --display=uid jdoe@bluemind.loc
{"uid":"0346FECF-47EA-441C-A419-EFB34F98B955"}
If you have a uid and want to know which user it corresponds to, simply search for it in the user administration:
File names in the directory can have different formats. E.g.:
ls -l
total 12980
drwxr-xr-x 2 root root 12288 janv. 11 14:46 ./
drwxr-xr-x 3 root root 4096 janv. 4 17:36 ../
-rw-r--r-- 1 root root 640 nov. 9 14:35 audit-2C0728BF-770D-4C2B-8365-AC1B168EE427@bluemind.loc.log
-rw-r--r-- 1 root root 2712 janv. 11 14:33 audit-8DEEA368-C34F-4F94-B711-0967C4460584@bluemind.loc.log
-rw-r--r-- 1 root root 311419 déc. 21 11:57 audit-calendar:079FC452-5725-4F50-B606-6EEEDA8BCDBF@bluemind.loc.log
-rw-r--r-- 1 root root 660 nov. 6 15:43 audit-calendar:ADC181A0-4124-42D8-BB92-4AF9031B3C46@bluemind.loc.log
-rw-r--r-- 1 root root 670 nov. 13 09:22 audit-calendar:Default:09F20F61-1904-4872-8B12-552693652163@bluemind.loc.log
-rw-r--r-- 1 root root 671 déc. 20 16:36 audit-calendar:Default:0C905A1A-D337-4208-8804-2B00EFA3FE2B@bluemind.loc.log
...
This is because:
- the
calendar:string is included in users' and resources' default calendar uids - the
Default:string is included in the users' default calendar uids
As a result, the file name shows:
audit-XYZ123: a secondary user or domain calendaraudit-calendar:XYZ123: a resource calendaraudit-calendar:Default:XYZ123: a default user calendar
Searching with bm-cli
The bm-cli command line interface can help you filter and view log contents more clearly.
The basic command for displaying a list of all events contained in a log file is :
bm-cli calendar log <fichier>
For example:
bm-cli calendar log audit-calendar\:Default\:655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal.log
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
| Info | Event | Calendar |
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
| 2022-11-18T09:01:35.064 | | { |
| 655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal | | "id" : 52, |
| create | | "uid" : "calendar:Default:655C382F-5197-4A64-A70F-71010EECAB3F", |
| SUCCESS | | "type" : "calendar", |
| 31a2b344-c933-4c52-a3b0-016c2de13711 | | "name" : "John Doe", |
| bm-webserver-authfilter | | "owner" : "655C382F-5197-4A64-A70F-71010EECAB3F", |
| Send-Notification:true | | "createdBy" : "system", |
| | | "updatedBy" : "system", |
| | | "created" : 1665475636451, |
| | | "updated" : 1665475636451, |
| | | "domainUid" : "734ea413.internal", |
| | | "defaultContainer" : true, |
| | | "readOnly" : false |
| | | } |
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
Without a filter, this command can be very verbose, as it will display ALL events in the log file. There are several options for searching for events and filtering the command return:
-
--data: displays the details of an event's data, cleaned and indented.
For example:+--------------------------------------------------------------------------------+--------------------------------------------------------------------------------+--------------------------------------------------------------------------------+
| 2022-12-19T15:35:33.603 | { | { |
| system@global.virt | "main" : { | "id" : 52, |
| create | "dtstart" : { | "uid" : "calendar:Default:655C382F-5197-4A64-A70F-71010EECAB3F", |
| SUCCESS | "iso8601" : "2022-12-22T09:00:00.000+01:00", | "type" : "calendar", |
| a6238878-66b5-4152-9320-701da924fa44 | "timezone" : "Europe/Paris", | "name" : "John Doe", |
| bm-webserver-authfilter | "precision" : "DateTime" | "owner" : "655C382F-5197-4A64-A70F-71010EECAB3F", |
| | }, | "createdBy" : "system", |
| | "summary" : "déplacement du jeudi", | "updatedBy" : "system", |
| | "classification" : "Public", | "created" : 1665475636451, |
| | "location" : null, | "updated" : 1665475636451, |
| | "description" : null, | "domainUid" : "734ea413.internal", |
| | "priority" : 5, | "defaultContainer" : true, |
| | "alarm" : [ { | "readOnly" : false |
| | "action" : "Display", | } |
| | "trigger" : -900, | |
| | "description" : null, | |
| | "duration" : null, | |
| | "repeat" : null, | |
| | "summary" : null | |
| | } ], | |
| | "status" : "Confirmed", | |
| | "attendees" : [ { | |
| | "cutype" : "Individual", | |
| | "member" : null, | |
| | "role" : "RequiredParticipant", | |
| | "partStatus" : "NeedsAction", | |
| | "rsvp" : true, | |
| | "delTo" : null, | |
| | "delFrom" : null, | |
| | "sentBy" : null, | |
| | "commonName" : "John Doe", | |
| | "dir" : | |
| | "bm://734ea413.internal/users/655C382F-5197-4A64-A70F-71010EECAB3F", | |
| | "lang" : null, | |
| | "mailto" : "jdoe@dev.bluemind.net", | |
| | "uri" : null, | |
| | "internal" : true, | |
| | "responseComment" : null, | |
| | "counter" : null | |
| | } ], | |
| | "organizer" : { | |
| | "uri" : null, | |
| | "commonName" : "John Smith", | |
| | "mailto" : "hannibal@dev.bluemind.net", | |
| | "dir" : | |
| | "bm://734ea413.internal/users/DFAB6B5F-8416-422B-9E20-CF1C28D1DEF6" | |
| | }, | |
| | "categories" : [ ], | |
| | "exdate" : null, | |
| | "rdate" : null, | |
| | "rrule" : null, | |
| | "url" : null, | |
| | "conference" : null, | |
| | "conferenceId" : null, | |
| | "conferenceConfiguration" : { }, | |
| | "attachments" : [ ], | |
| | "properties" : { }, | |
| | "sequence" : 1, | |
| | "draft" : false, | |
| | "dtend" : { | |
| | "iso8601" : "2022-12-22T13:00:00.000+01:00", | |
| | "timezone" : "Europe/Paris", | |
| | "precision" : "DateTime" | |
| | }, | |
| | "transparency" : "Opaque" | |
| | }, | |
| | "occurrences" : [ ], | |
| | "counters" : [ ], | |
| | "properties" : null, | |
| | "icsUid" : "a6238878-66b5-4152-9320-701da924fa44", | |
| | "acceptCounters" : true | |
| | } | |
+--------------------------------------------------------------------------------+--------------------------------------------------------------------------------+--------------------------------------------------------------------------------+ -
--data-by-date: displays all events, adding data (as above) only for log lines corresponding to the given date.
Research examples:#affichage des données enregistrées le 19/10/2024 à 15h35:33s :
bm-cli calendar log --data-by-date="2024-10-19T15:35:33" audit-calendar\:Default\:655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal.log
#affichage des données enregistrées le 18 octobre 2024 :
bm-cli calendar log --data-by-date="2024-10-18" audit-calendar\:Default\:655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal.log`} -
--event-query: searches for a character string in the event data
Example of searching for events containing the term "displacement":bm-cli calendar log --data --event-query="déplacement" audit-calendar\:Default\:655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal.logExample of a search for data on all actions concerning the event named "JDOE booking":
bm-cli calendar log --event-query="réservation JDOE" audit-calendar\:Default\:655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal.log
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
| Info | Event | Calendar |
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
| 2022-12-19T10:14:23.76 | | { |
| 655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal | | "id" : 52, |
| create | | "uid" : "calendar:Default:655C382F-5197-4A64-A70F-71010EECAB3F", |
| SUCCESS | | "type" : "calendar", |
| 0a62464b-74d2-4d79-a8a3-23d3ab4ffc35 | | "name" : "John Doe", |
| bm-webserver-authfilter | | "owner" : "655C382F-5197-4A64-A70F-71010EECAB3F", |
| Send-Notification:true | | "createdBy" : "system", |
| | | "updatedBy" : "system", |
| | | "created" : 1665475636451, |
| | | "updated" : 1665475636451, |
| | | "domainUid" : "734ea413.internal", |
| | | "defaultContainer" : true, |
| | | "readOnly" : false |
| | | } |
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
| 2022-12-19T10:14:46.17 | | { |
| system@global.virt | | "id" : 52, |
| update | | "uid" : "calendar:Default:655C382F-5197-4A64-A70F-71010EECAB3F", |
| SUCCESS | | "type" : "calendar", |
| 0a62464b-74d2-4d79-a8a3-23d3ab4ffc35 | | "name" : "John Doe", |
| bm-webserver-authfilter | | "owner" : "655C382F-5197-4A64-A70F-71010EECAB3F", |
| | | "createdBy" : "system", |
| | | "updatedBy" : "system", |
| | | "created" : 1665475636451, |
| | | "updated" : 1665475636451, |
| | | "domainUid" : "734ea413.internal", |
| | | "defaultContainer" : true, |
| | | "readOnly" : false |
| | | } |
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+We can see that the event was created on 12/19/2022 at 2:23pm and then modified on the same day at 2:46pm. To learn more about these 2 actions, we can display the details thanks to the addition of the previous
--dataoption:bm-cli calendar log --data --event-query="réservation JDOE" audit-calendar\:Default\:655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal.log -
--event-uid: displays log lines concerning an identified event.
For example:bm-cli calendar log --event-uid="5f92c02f-98fc-404c-a360-0d760865246a" audit-calendar\:Default\:655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal.log
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
| Info | Event | Calendar |
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
| 2022-12-01T10:15:14.216 | | { |
| 655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal | | "id" : 52, |
| create | | "uid" : "calendar:Default:655C382F-5197-4A64-A70F-71010EECAB3F", |
| SUCCESS | | "type" : "calendar", |
| 5f92c02f-98fc-404c-a360-0d760865246a | | "name" : "John Doe", |
| bm-webserver-authfilter | | "owner" : "655C382F-5197-4A64-A70F-71010EECAB3F", |
| Send-Notification:true | | "createdBy" : "system", |
| | | "updatedBy" : "system", |
| | | "created" : 1665475636451, |
| | | "updated" : 1665475636451, |
| | | "domainUid" : "734ea413.internal", |
| | | "defaultContainer" : true, |
| | | "readOnly" : false |
| | | } |
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
| 2022-12-01T10:15:14.365 | | { |
| 655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal | | "id" : 52, |
| send-mail | | "uid" : "calendar:Default:655C382F-5197-4A64-A70F-71010EECAB3F", |
| SUCCESS | | "type" : "calendar", |
| 5f92c02f-98fc-404c-a360-0d760865246a | | "name" : "John Doe", |
| mailto:hannibal@dev.bluemind.net | | "owner" : "655C382F-5197-4A64-A70F-71010EECAB3F", |
| bm-webserver-authfilter | | "createdBy" : "system", |
| SMTP response:250: 2.0.0 Ok: queued as E9C262C2845 | | "updatedBy" : "system", |
| | "created" : 1665475636451, |
| | | "updated" : 1665475636451, |
| | | "domainUid" : "734ea413.internal", |
| | | "defaultContainer" : true, |
| | | "readOnly" : false |
| | | } |
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
| 2022-12-01T10:15:15.063 | | { |
| 655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal | | "id" : 52, |
| send-mail | | "uid" : "calendar:Default:655C382F-5197-4A64-A70F-71010EECAB3F", |
| SUCCESS | | "type" : "calendar", |
| 5f92c02f-98fc-404c-a360-0d760865246a | | "name" : "John Doe", |
| mailto:t.peck@dev.bluemind.net | | "owner" : "655C382F-5197-4A64-A70F-71010EECAB3F", |
| bm-webserver-authfilter | | "createdBy" : "system", |
| SMTP response:250: 2.0.0 Ok: queued as 9AB372C2848 | | "updatedBy" : "system", |
| | | "created" : 1665475636451, |
| | | "updated" : 1665475636451, |
| | | "domainUid" : "734ea413.internal", |
| | | "defaultContainer" : true, |
| | | "readOnly" : false |
| | | } |
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+The event was created on 01/12/2022 at 10:15 am and 2 emails were sent to hannibal@dev.bluemind.net and t.peck@dev.bluemind.net.
-
filtered-actions: the actions that need to be filtered, namely the actions that SHOULD NOT appear. For example,--filtered-actions=create,updatewill hide the create and update actions. So, in our example above, we want to check whether the invitation emails have been issued, so we'll use the following option to hide the creation action that was listed:bm-cli calendar log --filtered-actions="create" --event-uid="5f92c02f-98fc-404c-a360-0d760865246a" audit-calendar\:Default\:655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal.logIf, on the other hand, you wish to clean up the output and not see the emails sent, but only the actions performed on the event:
bm-cli calendar log --filtered-actions="send-mail" --event-uid="5f92c02f-98fc-404c-a360-0d760865246a" audit-calendar\:Default\:655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal.log -
--calendar-query: searches for a character string in the calendar data.
Note: In the general case, a log file corresponds to a calendar, so this option will bring up all events, but it is possible to compile several files into a single one, in which case it will be useful to be able to search on a given calendar.
Analyze a log line
The bm-cli output slices and presents a log line in 3 columns.
The 1st column shows information about the action logged :
-
the date with the precise time of the action recording
⚠️ This is GMT time, so there may be a time difference with the actual time at which the action was carried out, depending on the time zone. As the action logged here at 10:15 a.m. is winter time in France (December 1), it was actually performed and logged at 11:15 a.m..
-
the uid of the user performing the action and of the domain
-
action type (create/update/etc.)
-
whether the action was successful (SUCCESS) or not (FAILURE)
-
event uid
-
the origin of the action:
- `bm-webserver-authfilter: webmail or Thunderbird
bm-eas: EAS connected device- bm-lmtpd_from_user1@domain.tld_to_user2@domain.tld`: the action was triggered by an email containing an .ics file
bm-mapi: Outlook connected with MAPI
-
if notification has been requested for guests
-
the response from the mail server in the case of
send-mailactions
The 2nd column displays the event details when requested via a query. The main useful information is :
- dtstart and dtend: identify the event's start and end times.
- summary: the event's title.
- attendees: guest list
Note: The list is framed by square brackets, each participant is framed by braces
Useful information for each of them includes:partStatus: current participation status (confirmed, pending, refused)rsvp: indicates whether a response request (notification) has been sent (truefor yes,falsefor no)commonName: the guest's namemailto: the guest's email addressdir: contains the guest user's UID for internal users
- organizer: event's organizer
For recurring events, additional useful information is :
- rrule: the recurrence rule
- exdate: list of dates on which the event does NOT take place (occurrences that have been deleted)
- occurrences: list of exceptions (occurrences that have been modified) with details of the data specific to each of them
The 3rd column shows information on the calendar, in particular:
- the complete calendar uid
- calendar type
- owner's name
- owner's uid
- defaultContainer: indicates whether this is the default calendar or a secondary calendar
For example, we are looking for information about an event containing the word "DOCUMENTATION" in John Doe's calendar, not understanding when and by whom this was created :
bm-cli calendar log --event-query="DOCUMENTATION" audit-calendar\:Default\:655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal.log
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
| Info | Event | Calendar |
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
| 2023-01-03T12:54:04.28 | | { |
| DFAB6B5F-8416-422B-9E20-CF1C28D1DEF6@734ea413.internal | | "id" : 52, |
| update | | "uid" : "calendar:Default:655C382F-5197-4A64-A70F-71010EECAB3F", |
| SUCCESS | | "type" : "calendar", |
| 19b56d07-3841-4f5c-988e-a308fe41cb38 | | "name" : "John Doe", |
| bm-webserver-authfilter | | "owner" : "655C382F-5197-4A64-A70F-71010EECAB3F", |
| Send-Notification:true | | "createdBy" : "system", |
| | | "updatedBy" : "system", |
| | | "created" : 1665475636451, |
| | | "updated" : 1665475636451, |
| | | "domainUid" : "734ea413.internal", |
| | | "defaultContainer" : true, |
| | | "readOnly" : false |
| | | } |
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
Only one log line concerns this event. The 1st column tells us that :
- it is a modification (
update) of an event - it was created by the user
DFAB6B5F-8416-422B-9E20-CF1C28D1DEF6(a console search will identify John Smith) - it took place on January 3rd at 1:54pm (12:54pm GMT)
- of the uid event
19b56d07-3841-4f5c-988e-a308fe41cb38 - the change was made directly in BlueMind (
bm-webserver-authfilter) - notifications were sent to guests
The 3rd column tells us that :
- the action has been carried out on the default calendar
- of user John Doe of uid
655C382F-5197-4A64-A70F-71010EECAB3F
To find out more about the changes that have been made, we will add the parameter --data to the command :
bm-cli calendar log --data --event-query="DOCUMENTATION" audit-calendar\:Default\:655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal.log
+--------------------------------------------------------------------------------+--------------------------------------------------------------------------------+--------------------------------------------------------------------------------+
| Info | Event | Calendar |
+--------------------------------------------------------------------------------+--------------------------------------------------------------------------------+--------------------------------------------------------------------------------+
| 2023-01-03T12:54:04.28 | { | { |
| DFAB6B5F-8416-422B-9E20-CF1C28D1DEF6@734ea413.internal | "main" : { | "id" : 52, |
| update | "dtstart" : { | "uid" : "calendar:Default:655C382F-5197-4A64-A70F-71010EECAB3F", |
| SUCCESS | "iso8601" : "2022-12-30T14:30:00.000+01:00", | "type" : "calendar", |
| 19b56d07-3841-4f5c-988e-a308fe41cb38 | "timezone" : "Europe/Paris", | "name" : "John Doe", |
| bm-webserver-authfilter | "precision" : "DateTime" | "owner" : "655C382F-5197-4A64-A70F-71010EECAB3F", |
| Send-Notification:true | }, | "createdBy" : "system", |
| | "summary" : "réunion DOCUMENTATION", | "updatedBy" : "system", |
| | "classification" : "Public", | "created" : 1665475636451, |
| | "location" : "", | "updated" : 1665475636451, |
| | "description" : "", | "domainUid" : "734ea413.internal", |
| | "priority" : 5, | "defaultContainer" : true, |
| | "alarm" : [ { | "readOnly" : false |
| | "action" : "Display", | } |
| | "trigger" : -900, | |
| | "description" : null, | |
| | "duration" : null, | |
| | "repeat" : null, | |
| | "summary" : null | |
| | } ], | |
| | "status" : "Tentative", | |
| | "attendees" : [ { | |
| | "cutype" : "Individual", | |
| | "member" : null, | |
| | "role" : "RequiredParticipant", | |
| | "partStatus" : "NeedsAction", | |
| | "rsvp" : true, | |
| | "delTo" : null, | |
| | "delFrom" : null, | |
| | "sentBy" : null, | |
| | "commonName" : "John Smith", | |
| | "dir" : | |
| | "bm://734ea413.internal/users/DFAB6B5F-8416-422B-9E20-CF1C28D1DEF6", | |
| | "lang" : null, | |
| | "mailto" : "hannibal@dev.bluemind.net", | |
| | "uri" : | |
| | "addressbook_734ea413.internal/DFAB6B5F-8416-422B-9E20-CF1C28D1DEF6", | |
| | "internal" : true, | |
| | "responseComment" : null, | |
| | "counter" : null | |
| | }, { | |
| | "cutype" : "Individual", | |
| | "member" : null, | |
| | "role" : "RequiredParticipant", | |
| | "partStatus" : "NeedsAction", | |
| | "rsvp" : true, | |
| | "delTo" : null, | |
| | "delFrom" : null, | |
| | "sentBy" : null, | |
| | "commonName" : "Templeton Peck", | |
| | "dir" : | |
| | "bm://734ea413.internal/users/6D97576A-237E-4D04-8BEB-FDA7DEC7A50E", | |
| | "lang" : null, | |
| | "mailto" : "t.peck@dev.bluemind.net", | |
| | "uri" : | |
| | "addressbook_734ea413.internal/6D97576A-237E-4D04-8BEB-FDA7DEC7A50E", | |
| | "internal" : true, | |
| | "responseComment" : null, | |
| | "counter" : null | |
| | } ], | |
| | "organizer" : { | |
| | "uri" : null, | |
| | "commonName" : "John Doe", | |
| | "mailto" : "jdoe@dev.bluemind.net", | |
| | "dir" : | |
| | "bm://734ea413.internal/users/655C382F-5197-4A64-A70F-71010EECAB3F" | |
| | }, | |
| | "categories" : [ ], | |
| | "exdate" : [ ], | |
| | "rdate" : null, | |
| | "rrule" : { | |
| | "frequency" : "WEEKLY", | |
| | "count" : null, | |
| | "until" : { | |
| | "iso8601" : "2023-01-05T13:30:00.000Z", | |
| | "timezone" : "UTC", | |
| | "precision" : "DateTime" | |
| | }, | |
| | "interval" : 1, | |
| | "bySecond" : null, | |
| | "byMinute" : null, | |
| | "byHour" : null, | |
| | "byDay" : [ { | |
| | "day" : "FR", | |
| | "offset" : 0 | |
| | } ], | |
| | "byMonthDay" : null, | |
| | "byYearDay" : null, | |
| | "byWeekNo" : null, | |
| | "byMonth" : null | |
| | }, | |
| | "url" : "", | |
| | "conference" : "", | |
| | "conferenceId" : "", | |
| | "conferenceConfiguration" : { }, | |
| | "attachments" : [ ], | |
| | "properties" : { }, | |
| | "sequence" : 1, | |
| | "draft" : false, | |
| | "dtend" : { | |
| | "iso8601" : "2022-12-30T15:30:00.000+01:00", | |
| | "timezone" : "Europe/Paris", | |
| | "precision" : "DateTime" | |
| | }, | |
| | "transparency" : "Opaque" | |
| | }, | |
| | "occurrences" : [ ], | |
| | "counters" : [ ], | |
| | "properties" : { }, | |
| | "icsUid" : "a2056806-139b-4cba-ba87-e794efb4bfea", | |
| | "acceptCounters" : true | |
| | } | |
+--------------------------------------------------------------------------------+--------------------------------------------------------------------------------+--------------------------------------------------------------------------------+
→ The meeting takes place at 2:30 p.m.
→ It is repeated every week
→ It is organized by John Doe
→ It includes 2 guests (John Smith and Templeton Peck)
Since the bm-cli command only returns an update, we will search for all entries concerning this event using its uid, which will allow us to trace its creation:
bm-cli calendar log --event-uid="19b56d07-3841-4f5c-988e-a308fe41cb38" audit-calendar\:Default\:655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal.log
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
| Info | Event | Calendar |
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
| 2022-12-05T10:25:04.065 | | { |
| 655C382F-5197-4A64-A70F-71010EECAB3F@734ea413.internal | | "id" : 52, |
| create | | "uid" : "calendar:Default:655C382F-5197-4A64-A70F-71010EECAB3F", |
| SUCCESS | | "type" : "calendar", |
| 19b56d07-3841-4f5c-988e-a308fe41cb38 | | "name" : "John Doe", |
| bm-webserver-authfilter | | "owner" : "655C382F-5197-4A64-A70F-71010EECAB3F", |
| Send-Notification:true | | "createdBy" : "system", |
| | | "updatedBy" : "system", |
| | | "created" : 1665475636451, |
| | | "updated" : 1665475636451, |
| | | "domainUid" : "734ea413.internal", |
| | | "defaultContainer" : true, |
| | | "readOnly" : false |
| | | } |
+--------------------------------------------------------------------------------+-------+--------------------------------------------------------------------------------+
→ The user's uid tells us that John Doe himself, owner of the calendar, created this event on the morning of December 5, 2022.
By adding the --data option, we will obtain the details of the event as it was created, in particular these:
[...]
"dtstart" : {
"iso8601" : "2022-12-30T11:30:00.000+01:00",
"timezone" : "Europe/Paris",
"precision" : "DateTime"
},
[...]
"summary" : "réunion COMMERCE",
[...]
CONCLUSION : This was originally the trade meeting, which took place at 11.30am, but was renamed and moved to 2.30pm by John Smith on January 3 at 1.54pm.