Viewing AEM Audit Log without ACS Commons

Share article


AEM Audit Log is a convenient way to check who modified what and when within AEM pages or assets.

ACS Commons provides an Audit Log Search tool which allows users to do an AEM Audit Log search and see what properties of a page (and enclosed components) have been altered.

But what if you don’t have access to ACS Commons in your Production environment or it doesn’t work as expected (see Pic. 1 below), but you still need to know what has been changed on a particular page? This article will show you how to find out in two steps:

Audit Log Search Pic. 1. An unknown error occurred in the Audit Log Search tool.

Step #1. Navigate to audit log events in CRXDE.

AEM Audit Log entries for pages are located under the

folder in the repository. An example for project ‘acme’ and page ‘testpage’ is in Pic. 2 below.

Testpage Pic. 2. Audit logs for a test page inside ‘acme’ project’.

Log entries can also be found and sorted by date using the following SQL2 query (works in AEM 6.4 and older; AEM 6.5 returns an empty result set)

Step #2. Deserialize a binary with modified properties.

An AEM Audit Log entry contains information on what exactly was modified in a page and its enclosed components. A set of modified properties can be retrieved from the ‘cq:properties’ field.

We need to click the ‘view’ link (in the purple oval in Pic. 2 above), download the binary, and run the following Java program:

The code is based on Audit Log Search Servlet from ACS Commons, so the program will print a list of modified properties similar to the console:

Now we know which particular properties were modified and captured as an AEM Audit Log Event!

Author: Denis Glushkov