Audit and Session Trail

The “Audit Trail” page in Dashboard houses two major features for monitoring user and session activity: “Audit Trail” and “Session Trail.” Audit Trail provides administrators with an audit log to track and search through account actions. Account activity can be audited at all levels of Frame platform hierarchy. Session Trail is also viewable from this part of the Dashboard. Session Trail provides detailed information about current session activity in the account. This guide shows how to access both Audit Trail and Session Trail and provides detailed descriptions of each component. You can use the links below to jump ahead, if needed.

Access Audit/Session Trail

As mentioned above, you can access the Audit Trail at every level of the Frame platform hierarchy. Perhaps the simplest way to access Audit Trail from the account level would be through your account’s Dashboard. From the Dashboard, simply click the “Audit Trail” link in the menu on the left.

../_images/activity_1.png

Click the “Session Trail” tab right next to the Audit Trail tab to access that page in your Dashboard.

../_images/activity_1a.png

If you would like to access the Audit Trail/Session Trail page for an Organization or Customer entity, simply search for the entity in your console view. Click on the menu button to the right of the desired entity and select either “Audit Trail” or “Sessions.”

../_images/activity_1b.png

Audit Trail Overview

../_images/activity_general.png

Under the “Audit Trail” section header, there is a search bar. You can search by user email and name here or use the column titles to sort the account activity.

../_images/activity_sort.png

In this example, we have sorted the account activity by date and time.

If you would like to search for account actions within a certain time frame, click on the date range in the upper right corner of the section. Set your desired time frame by clicking on the starting and ending dates in the calendar view.

../_images/activity_3.png

You can also use the links in the left side of the calendar if you don’t have a specific date range in mind.

Using the filter icon in the top right corner, you can filter your results by specific account action.

../_images/activity_2.png

Lastly, you can download the details of your Audit Trail in CSV format by clicking the blue “Download CSV” link in the upper right corner. The CSV will provide all Audit Trail details for the time frame specified to the left of the download link.

../_images/activity_csv.png

Session Trail Overview

You may notice immediately that all of the information under the Session Trail tab is blue. Administrators can hover over any blue text to view additional details for that particular subject.

../_images/sessiont_1.png

Hovering over the instance name of the first session shows us the cloud provider, cloud provider instance name, RAM, and other details.

You can use the search bar under the “Session Trail” section header by entering details such as a user’s email, name, session ID, or use the column titles to sort the information to your preference.

Just like the Audit Trail page, you can also narrow your Session Trail information down by selecting a date range in the upper right corner.

../_images/sessiont_2.png

You can narrow down to a single day or expand your range over the span of a year.

Click on the ellipsis listed next to a session and select “Timeline” to display a timeline view of session events.

../_images/sessiont_3.png

Hover over each even to see additional details.

../_images/sessiont_4.png

Lastly, you can download the details of your Session Trail in CSV format by clicking the blue “Download CSV” link in the upper right corner. The CSV will provide all Session Trail details for the time frame specified to the left of the download link.