---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Cloud Encryption logging

# Cloud Encryption logging {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 Minuten Lesedauer

Learn about logging options for Cloud Encryption.

## Cloud Encryption logging tables {#dare-logging__section_ox4_54m_vsb}

Use these tables to find logging information related to Cloud Encryption transactions on
your instance.
{#dare-logging__table_z5v_zmt_ctb__entry__2}

| Table | Description |
|-|-|
| Cloud Encryption Metadata \[dare_key_metadata\] | Cloud Encryption Metadata captures key life-cycle management metadata. On this table you can find key life-cycle, state, and version information. This table is updated after each key operation. |
| Key Management Transactions \[dare_key_request\] | Key Management Transactions captures key management transaction information. On this table you can find logging for each step of a transaction. The table records any error information for a transaction in the error message field. |
| Sys Audits\[sys_audit\] | The Sys Audits table captures inserts and updates to all audited records on your instance. On this table you can find changes to records on your instance, when the changes were made, and which user account initiated the change. |
[ ]

{#dare-logging__table_z5v_zmt_ctb}

## Monitor key rotation operations {#dare-logging__section_jpz_v4m_vsb}

Use the Cloud Encryption Key Metadata \[dare_key_metadata\] table to find information on the
life-cycle of your key. In this table you can find information like the origin, activation
date, state, and version of your keys.

Use the Key Management Transactions \[dare_key_request\] table to monitor transactions of key
operations. In this table you can find all requests relating to your keys, including the
state, status, and which step in the process the request is in. Completed requests are
retained on this table with the Completed status.

This example shows a key rotation operation. During this operation, the old key life- cycle
state updates from active to rotated, and the version state updates from active to
retired.
Abbildung : 1. Key definition for a rotated key

Looking at the Sys Audits\[sys_audit\] table, admins can see changes made to records on the
Cloud Encryption Key Metadata \[dare_key_metadata\] table. Admins can see which records were
updated and when. The log entries also record the field that was changed, and the old and
new values.
Abbildung : 2. Audit logs for a withdrawn key

Admins can view the records on the Cloud Encryption Key Metadata \[dare_key_metadata\] table.
In the audit records below, the request status was changed from processing to completed.
Abbildung : 3. Audit logs for a withdrawn key

## Logging for key withdrawal operations {#dare-logging__section_byf_z4m_vsb}

Logging information on key withdrawal is stored in the Audits \[sys_audit\] table. This
logging information contains information on who initiated the key withdrawal and when the
withdrawal took place.

This example shows a key withdrawal operation. During this operation, the key lifecycle
state updates from generated, to active, to destroyed. The key version updates from unknown,
to active, to retired.
Abbildung : 4. Key definition for a withdrawn key

Looking at the Sys Audits\[sys_audit\] table, admins can the Cloud Encryption Key Metadata
\[dare_key_metadata\] table changes.
Abbildung : 5. Audit logs for a withdrawn key