- 26 Jun 2024
- 4 Minutes to read
- Print
- DarkLight
- PDF
Activity Logs Page
- Updated on 26 Jun 2024
- 4 Minutes to read
- Print
- DarkLight
- PDF
Use the Activity Logs page to track all activity in the Axonius system.
By default, all activities are written to the relevant Activity Logs. You can disable writing access (Read) activities to the Activity Logs from the Activity Logs System Settings.
To open the Activity Logs page, from the left navigation panel, click the Activity Logs icon.
Activity Logs Overview
The Activity Logs page displays a list of all activities in the Axonius system, sorted from the newest to the oldest activities.
This page provides the following details:
- Type - the type of activity.
- User Activity - Activity done by a user (e.g., Delete Report, Add Role).
- System Activity - Activity done by the system (e.g., Fetch devices, Discovery Cycle Ended)
- API Activity - Activity done directly by the API and not by a user in the GUI.
- Date - The timestamp of the activity in UTC time.
- User - The user who performed the activity. The user name is displayed with a prefix:
- internal - A user defined internally in Axonius by one of the system admins.
- saml or ldap - A user who logged in using the SAML or LDAP based login options.
- Role - The role that defines the permissions of the user.
- Data Scope - When the 'Data Scope' feature is activated on the system, the log page shows the Data Scope that defines the assets that the user can access.
- Impersonated by - When the 'Impersonation' feature is activated on the system, the log page shows which activities were performed by a user in impersonation mode.
- Action - The action of the activity.
- Category - The category of the activity.
- Discovery Cycle - The identifier of the discovery cycle in which the activity occurred. This is presented as the start date and time of the discovery cycle.
- Message - A message with additional details about the activity. Mouse over the "Copy to Clipboard" icon at the end of the message, and click on it, to copy the complete text of the message.
- Edit Connection Messages - Messages for Edit Connection actions show:
- Old configuration
- New configuration
- Changed configuration only - presents only changes that were made.
- Edit Connection Messages - Messages for Edit Connection actions show:
Changing the Order Columns are Displayed
You can change the order of columns displayed.
Drag and drop columns on the table to arrange them in the order you want. The changes are only for the current session.
Searching and Filtering
You can filter the logs that are displayed. You can then use the filters to create System queries based on the filters and also save them as queries which can be used later on. Read more about System Queries.
The following filters are available:
- User - The user or users who performed actions.
- Action - The type or types of actions performed on your system.
- Category - The category or categories of the actions available on your system.
- Type - The type of log message that indicates the source of system activity.
- Discovery Cycle - Display only fetch history from a specific Discovery Cycle, or Cycles.
- Time Range - The activities that occurred in a specified period of time. See Filtering by Date below to learn how to choose the date range.
- Search Log Messages - Search for any text in a log message.
Filtering by Date
You can filter activities by date with the date range picker or by a specified last number of hours, days, weeks, months, or years or for a time range prior to the number of hours, days, weeks, months, or years set.
To filter by date range:
- From the Time Range dropdown, select In range.
- Select Start date and End date to indicate the date range to display results.
- To filter results only for a specific date, select the same date twice.
- If you want to include specific times in the date range, click Select Time in the date range picker.
- Click OK to set the Time Range filter.
To filter by the last number of hours, days, weeks, months, or years:
- From the Time Range dropdown, select Last and specify a value in the field next to Last.
- By default, the value is the number of days. If you want to filter by hours/weeks/months/years, select the relevant option from the days dropdown.
To filter by the number of days ago:
You can set a Time Range to show only the events prior to the number of hours, days, weeks, months, or years set.
- From the Time Range dropdown, select Prior to.
- In the number field enter a value or use the arrows to select the value you want.
- By default, the value is the number of days. If you want to filter by hours/weeks/months/years, select the relevant option from the days dropdown.
- Click Clear All to clear all selections in a specific filter.
- Click Reset from the top left of the Activity Logs page to clear all filters and display the entire log activity.
Saving Filters and Searches
You can save filters and searches you configure on this page as Queries, Refer to System Queries (Creating Queries Using Filters) for full details. Once you save a query, you can see it on the Queries page.
Use:
- Save As - to save the filters/search as a Query
- Reset - to reset the display
Activity Logs Retention
The Activity Logs page always displays the last 100,000 activities.
Exporting Activity Logs
You can export the activity logs results table data to a CSV file.
To export the results to a CSV file:
- In the Activity Logs page, on the right side above the table, click Export CSV .
The CSV file is automatically downloaded with a name format as:
“axonius_activity_logs_< date >< time >.csv”
When you set a filter, only the filtered data is exported to the CSV file.
For general information about working with tables refer to Working with Tables.