Reference

Audit log, export and import

The audit log of every change, and exporting or importing Heimnull's configuration as one file.

Audit log

Configure → Audit log (admins) records every change: who, when, from which address, and the value before and after. It covers configuration changes, logins and failed logins, mitigations started or withdrawn by hand, the emergency withdraw-all, password resets, support file downloads, and corrections the BGP reconciliation made.

A change and its audit entry are written together, so nothing changes without a record.

Export and import

Configure → Export / import (admins) moves configuration between servers as one JSON file.

The export holds networks, hostgroups, exporters, interfaces, classification rules, host names, saved searches, settings, BGP and notification routing.

Without secrets (the default), it’s safe to keep in version control, compare between servers, or send to someone helping you.
With secrets, it also holds users, API tokens (as hashes) and every stored secret (SNMP communities, BGP passwords, notification credentials) in plain text. Keep such a file somewhere safe.

An import works on any Heimnull server, including one with a different HN_SECRET_KEY, and from older releases’ exports. Built-in classification rules you haven’t edited come from the importing server’s own release.

From a script, with an admin API token: GET /api/config/export.

For full backups, including attack history and the audit log, see Backups and restore.