ArcGIS Enterprise Audit Logging

Know exactly who accessed
personal information

Qonda Auditor captures every data access event across your ArcGIS Enterprise stack and presents it in a clear, searchable audit trail for privacy compliance and investigation.

Request a demo See what’s included

Works across your ArcGIS stack

ArcGIS Server 10.x
ArcGIS Server 11.x
Portal for ArcGIS
ArcGIS Enterprise
IIS / Web Adaptor

Does any of this sound familiar?

If your organisation holds personal information in ArcGIS Enterprise, these questions come up constantly. Qonda Auditor answers all of them.

Who queried our residents layer last month?
We’ve had a privacy complaint — who accessed that record?
Our privacy audit is due and we can’t prove what was accessed
Can we show which staff accessed sensitive data outside their role?
We hold personal information in ArcGIS and need to demonstrate compliance
We need an audit trail to support a data breach investigation
Our GIS team can’t tell us who ran a query on the address layer
How do we know if ArcGIS data is being accessed appropriately?
For

Organisations with privacy obligations

  • Privacy and compliance officers
  • GIS administrators
  • IT security teams
  • Government agencies
  • Local councils
  • Health boards and utilities
  • Law enforcement
When

You need to prove who accessed what

  • Responding to a privacy complaint or investigation
  • Preparing for a privacy or security audit
  • Investigating a suspected data breach
  • Demonstrating compliance with privacy legislation
Where

Inside your own infrastructure

  • Self-hosted on your own Windows server
  • Audit data never leaves your network
  • Runs alongside your ArcGIS Enterprise deployment

Everything you need to audit ArcGIS data access

From capturing raw REST queries to scheduling compliance reports, Qonda Auditor gives you complete visibility into who is accessing personal information in your ArcGIS Enterprise.

SOI Request Interception

Captures the exact parameters of every MapServer REST query at the service level, including the requesting user, fields queried, and response metadata.

Multi-Source Collection

Pulls audit events from ArcGIS Server logs, Portal for ArcGIS logs, and IIS web logs into a single unified stream with a configurable collection interval.

Searchable Audit Trail

Filter the full audit history by user, time range, service, or layer to find exactly who accessed what data and when — with results in seconds.

Custom Reports

Build and schedule reports tailored to your privacy compliance requirements with full SQL query access to the audit database.

Charts & Dashboards

Visualise access patterns over time to spot anomalies, unusual activity volumes, and trends across users and services.

Pivot Tables

Slice and dice audit data across any dimension — by user, service, time period, or operation — without writing a single query.

Time-Series Analysis

IotDB-powered temporal queries for fast trend detection and pattern analysis across weeks or months of audit history.

Agent Monitoring

Real-time visibility into the status and health of your collection agents so you always know your audit pipeline is running.

Conditional Capture

Configure the SOI to only store records where the response contains specific personal information fields, reducing noise and storage overhead.

Up and running in an afternoon

Qonda Auditor installs as a Windows Service and connects to your ArcGIS Enterprise deployment using your existing infrastructure.

1

Install

Run the installer on your ArcGIS Server machine. The Agent and web dashboard are registered as Windows services and started automatically.

2

Configure

Enable your audit sources — MapServer SOI, ArcGIS Server logs, Portal logs, and IIS logs — in the admin interface. Log directories are auto-detected.

3

Collect

The agent runs continuously, harvesting audit events from all configured sources and storing them in an encrypted local database.

4

Investigate

Search the audit trail, run compliance reports, chart access patterns, and export evidence through the web dashboard.

Capture access from every layer of your stack

Qonda Auditor collects from four complementary sources to give you a complete picture of who is accessing data in your ArcGIS Enterprise environment.

MapServer REST (SOI)

A Server Object Interceptor deployed to ArcGIS Server captures every REST query after it executes, recording the user, operation, parameters, and response metadata.

ArcGIS Server Logs

Monitors AGS log files for service access events, user authentication, and administration actions using configurable log codes.

Portal for ArcGIS Logs

Tracks Portal authentication and access events including logins, feature access, and data export operations across your federated environment.

IIS Web Server Logs

Parses W3C access logs for all HTTP requests to ArcGIS endpoints, capturing every URL, user, and response code from the web tier.

Built for sensitive environments

Qonda Auditor runs entirely within your own infrastructure. Your audit data never leaves your control.

On-Premise Only

Runs entirely within your own infrastructure. Audit data is never sent to Ope Ltd, any cloud service, or any third party.

ArcGIS OAuth Only

Sign in with your existing ArcGIS Enterprise credentials. There are no Qonda Auditor user accounts or passwords to manage or reset.

Encrypted Storage

The local database uses AES-256 encryption. Your audit trail is protected at rest from the moment it is written.

Role-Based Access

Admin group configuration controls who can manage the system and configure audit sources, separate from users who can only view audit data.

HTTPS Enforcement

TLS 1.2/1.3 with cipher suite controls. Every response includes Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options headers.

No Telemetry

No outbound connections you don’t know about — not even for licensing. What happens on your server stays on your server.

Ready to see it in action?

Get in touch to arrange a demo or ask us anything about Qonda Auditor and how it fits your environment.

Request a demo

Get in touch

Have a question or want to arrange a demo? Fill in the form below and we’ll get back to you shortly.