When a user’s password is being changed, the change will be logged and will look similar to this:
2022-06-16T11:25:29.368Z|1ee50b7cdd06468e|<IP>|admin|jfrt@01g5hbxxfg4xwd179vje260z|test|U|USR|{"added":{"customData.gen_password_key":"*","customData.private_key":"*","customData.public_key":"*"},"updated":{"password":{"oldEntry":"*","newEntry":"*"}}}
This entry indicates that the custom data has been changed, and specifically, the password has been updated from the previous value (oldEntry) to a new value (newEntry). This entry contains some additional information: - The time and date in which the password was changed
- The IP from which the change was performed
- The user who performed the change (in this case, the admin user)
- The user whose password has been changed (in this case, a user named test)