Back to OpenMRS
GSoC 2026

Extend Audit Log Module

This project will evolve the Audit module into a comprehensive security and compliance tool by implementing three new, non-blocking auditing categories: a . Read Auditing: Logs who viewed patient records using a non-blocking, asynchronous mechanism with Spring AOP interception, a Caffeine cache for 5-minute event deduplication, and a background thread for batched database inserts. b. Security Events: Tracks critical user actions like successful/failed logins, account lockouts, logouts, session timeouts, and password resets by hooking into core OpenMRS authentication and service methods. c. Administrative Events: Logs changes to system configuration, such as global property modifications, module installations/uninstalls, and user/role management. Deliverables: The final product will include the three new log types stored in dedicated database tables (audit_read_log, audit_security_event, audit_admin_event), a complete REST API for querying and filtering these logs, a log export feature (CSV, Excel, PDF), and a Legacy UI viewer page.

Project details

Contributor

Sudhanshu++

Mentors

Not available

Technologies

Not listed in the archive