Common Tasks in the Audit Trail
Below you will find some of the most common tasks within the Audit Trail window.
The Audit Trail log file generates at midnight or the first time you open X_RISK for the day. The file holds a finite amount of data before generating a new one. The size of these database files are configurable from 10MB - 200MB with a default of 50MB of data.
- Access the Audit Trail log files here: <root drive>:ttlogfilesAuditLog
- The naming convention for the Audit Trail log files is: YYYY-MM-DD_n.mdb. Where n represents the file number for the day.
For example, a light trading day in October, followed by a heavy trading day might result in the following Audit Trail files:
With a maximum database file of 50MB, you can see at a glance your Audit Logs for October 23 exceed 100MB. Whereas, your Audit Log for October 22 was under 50MB.
Concise Audit Trail
Parsing the Audit Trail into smaller log files helps X_RISK run efficiently. In addition, when you open your Audit Trail, only the data captured in the current Audit Trail log file displays.
This means, if you close the Audit Trail in the morning, and reopen it later in the day, the Audit Trail may appear smaller. However, data from earlier in the day is still viewable in previous Audit Trail log files.
Tip: If you leave the Audit Trail open all day, you can see the entire day's events.
Audit Trail Message Types
Audit Trail messages break into the following categories:
Order messages include buy, sell, change, cancel/replace, delete, fills and partial fills.
The first line details the order information, including:
- The time the order was sent from the workstation to the TT Gateway (Time Sent column)
- An order status of Accept
- An action of Add, Change, or Delete.
The second line immediately follows the first and indicates acceptance by the TT Gateway. The order has been routed to the exchange host.
The third line displays sometime after the previous two. This message confirms receipt from the exchange and includes:
- The time the confirmation was received by the workstation (Time Processed column)
- A status of OK
- The time the confirmation was sent by the exchange's host machine (Exch Time column).
A status of OK and an action of Partial displays when an order partially fills. A status of OK and an action of Fill displays when an order fills. When you cancel and replace an order, the confirmation from the exchange host reflects a new order number.
Exchange announcements display a status of Alert, Info, or Warning and reflect general information sent by the exchange host or the TT Gateway.
Error messages display when the TT Gateway rejects a buy, sell, change, cancel/replace, or delete order.
- The first line details the order information, including a status of ERR to indicate that the order was rejected and not sent to the exchange host.
- The second line immediately follows the first and reflects a status of ERRS. A message (Msg column) explains the error.
The Audit Trail displays a message each time an alert threshold is crossed. The alert displays in the color that is defined within the Overview Alerts Manager. The syntax for the alert is as follows:
<Time>, <Status>, <Msg>, <Action>
Audit Trail History
Audit Trail history data is saved on your workstation's hard disk for ten calendar days in a Microsoft Access file.
To view Audit Trail history:
- From your desktop, click Start and choose Run.
- From the Run menu, type: <root drive>:ttLogFilesAuditLog.mdb
- Click OK.
Microsoft Access opens and displays ten (10) days worth of Audit Trail history. The available dates display by month and day (i.e., MMMDD-Dec 31).