Activity log
The Activity Log page lists the sessions that ran in a date range. Use it to see which users ran sessions, on which resources, under which access policies, and for how long.
To open it, select Auditing & Reporting > Activity Log in the Privilege Secure Console.
Filter the log
The toolbar has these controls:
| Control | Description |
|---|---|
| Search | Filters the sessions table to rows that match the text you enter. |
| Change type | <all users> (the default) shows the top 5 users and every session. Top 5 Users or Top 10 Users lists that many users and limits the sessions table to their sessions. |
| Date range | Sets the start and end dates. The default range is the last 30 days. |
| Refresh | Reloads the data. |
Search applies to the sessions table. It finds the text anywhere in the Session User, Login Account, Policy, Activity, Notes, Ticket Number, or Host value and ignores case. A space at the start or end counts as part of the text, so a full name typed with a trailing space doesn't match that name. Change type doesn't match on text.
When a table has no rows for the range, it shows None. Widen the date range if you expect results.
Summary for the date range
The Summary for the date range table combines all sessions in the range.
| Column | Description |
|---|---|
| SESSIONS | Total number of sessions. |
| TOTAL DURATION | Combined duration of all sessions. |
| AVERAGE | Average session duration. |
| MINIMUM | Shortest session duration. |
| MAXIMUM | Longest session duration. |
Top 5 users for the date range
The Top 5 users for the date range table lists the users with the most sessions. It has the USER, SESSIONS, TOTAL DURATION, AVERAGE, MINIMUM, and MAXIMUM columns, calculated per user. Select a user to open the user's details. See User and group details.
Sessions by all users
The sessions table is titled with the number of sessions, for example "12 sessions by all users". It has these columns:
| Column | Description |
|---|---|
| SESSION USER | The user who ran the session. |
| HOST | The resource the session used. |
| LOGIN ACCOUNT | The account the user signed in with on the resource. |
| POLICY | The access policy that granted the session. See Access policies. |
| ACTIVITY | The activity the session ran. See Activities. |
| START | When the session started. |
| DURATION | How long the session ran. |
| END | When the session ended. |
| NOTES | Notes entered when the session was requested. |
| TICKET NUMBER | Ticket number entered when the session was requested. |
You can resize and sort the columns.
Export the log as a CSV file
Select Export as CSV above the sessions table to save the log as a CSV file.
To export the log with a script instead, see Exporting the Activity Log as a CSV.
The export follows the current Search, Change type, and Date range settings and includes every matching session, not only the rows on screen. The file is named activity_logs.csv. Its header row uses the field names of the session data rather than the on-screen column titles.