User Logging

This page serves as a high level reference guide to what .decimal logs for user interactions with our software. There are 3 different sections detailed here for the use cases of user logging:

1. User Authentication for Auth0: .decimal uses Auth0 as its user authentication service. As such Auht0 maintains the user login logs for every user.
2. Customer Applications: Customer Applications include .decimal developed applications used by end clinical users that are downloaded and installed on the customer's local computers.
3. decimal Direct: Users will interact with the decimal Direct website to perform certain tasks. These interactions are logged for each user. In addition, Customer Applications connect to decimal Direct and some actions of the application may be logged.

.decimal uses Auth0 as its user authentication service. Auth0 logs user actions including:

• Successful & Failed Logins
• Successful Logouts
• Blocked Account (after too many login attempts)

Note: These logs are not directly accessible by end users, but may be provided by .decimal staff upon request.

See below for example logs for common Auth0 events:

Successful_login.json

{
    "date": "2022-05-11T12:13:02.783Z",
    "type": "Success Exchange",
    "client_id": "<REDACTED>",
    "client_name": "decimal Launcher",
    "ip": "<REDACTED>",
    "user_agent": "Electron 5.0.13 / Windows 10.0.0",
    "hostname": "dotdecimal.us.auth0.com",
    "user_id": "<REDACTED>",
    "user_name": "<REDACTED>",
    "isMobile": false,
}

Incorrect_password.json

{
    "date": "2022-05-11T13:24:10.066Z",
    "description": "Wrong email or password.",
    "connection": "decimal",
    "client_name": "decimal Launcher",
    "ip": "<REDACTED>",
    "user_agent": "Electron 5.0.13 / Windows 10.0.0",
    "details": {
    "error": {
      "message": "Wrong email or password."
    }
    },
    "user_id": "<REDACTED>",
    "user_name": "<REDACTED>",
    "isMobile": false
}

Blocked_user.json

{
    "date": "2022-05-11T13:54:35.190Z",
    "description": "User (<REDACTED>) attempted 10 consecutive logins unsuccessfully. Brute force protection is enabled for this connection, further attempts are blocked from this IP address for this user.",
    "connection": "decimal",
    "connection_id": "<REDACTED>",
    "client_id": "<REDACTED>",
    "ip": "<REDACTED>",
    "user_agent": "Electron 5.0.13 / Windows 10.0.0",
    "hostname": "dotdecimal.us.auth0.com",
    "user_id": "",
    "user_name": "<REDACTED>",
    "isMobile": false
}

Customer Applications include .decimal developed applications used by end clinical users that are downloaded and installed on the customer's local computers. These may include, but are not limited to: p.d, decimal3D, decimal Launcher, and decimal eRT. See each application below for an example activity log.

p.d logs the local user activity and records the following information to its local application database:

• If on p.d 5.4.5 or later these logs may be exported from the About menu within p.d to the designated Data folder in the p.d settings. A new Logs folder will be created that contain the unencrypted user logs.
• Otherwise these logs may be exported to a local text file only by a .decimal administrator. For assistance exporting the logs please contact .decimal support.

decimal3D logs the local user activity and records the following information to its local application database. This information is exportable from the Advanced menu option within the application.

decimal eRT logs the local user activity and records the following information to its local patient database. This information is exportable from the Organization Configuration → Export Logs block within the application.

Users will interact with the decimal Direct website to perform certain tasks. For each logged interaction in Direct the following is recorded:

See below for the outline of what user interactions are recorded.

A normal user interaction includes any non-elevated user tasks that are performed. Normal user interactions that are logged include:

A manager user interaction includes any elevated user tasks that are performed by the site manager within the Management pages. Manager user interactions that are logged include:

Other .decimal applications that connect to decimal Direct and .decimal logs some integration connections for diagnostic trouble shooting. These interactions include and capture: