This article contains detailed information about the Session events report, where you can view all the commands that were executed in a remote session.
Access Session events
- At the Segura platform, in the upper left corner click on the Grid Menu ⁝⁝⁝ and select Reports.
- Select Access control ➔ Session events.
Homepage buttons
| Item | Description |
|---|---|
| Show filters | It's identified by the magnifying glass icon. It displays or hides the search fields on the screen. |
| Update | It's identified by the counterclockwise arrow icon. It refreshes the page. |
| View actions | It's identified by the three vertical dots icon. It's a menu with possible actions for the report. |
| Print report | It's the option identified by the printer icon. It opens a new page for printing the report. |
| Export CSV | It's the option identified by the paper sheet icon. It downloads the report. |
| Schedule report | It's the option identified by the clock icon. It opens the Schedule report form. |
Info
When clicked, the question mark displayed on the page, sends you to the correct documentation.
Search fields
| Item | Description |
|---|---|
| Session ID | Identification number from the opened session. |
| Date/Time | Date and time of each command executed during the session. |
| until | End date for search events. |
| Event | Event type that can be executed during the session. |
| Note | Note message. |
| Segura user | Name from Segura user. |
| Origin IP | IP origin number. |
| Host | Host number from the session. |
| Remote user | Username from the remote user. |
| Filter | Button to filter and show the results according to your chosen preferences. |
| Clear | Clear all the text boxes with the options that were previously chosen. |
At Events field, it’s possible to have several kinds of events, such as:
- Files changed
- Files purged
- Created
- Drop session
- Exported Details
- Video Download
- Video Emission
- Blocked Event
- Observed Event
- Prohibited Event
- Terminated
- Started
- Interactivity blocked
- Interactivity blocked (attempted)
- Interactivity unlocked
- Interactivity unlocked (attempted)
- Live Stream
- Log viewer
- Session Play
- File transfer
Report fields
- ID: The sequential number identifies the order of executed commands.
- Session ID
- Date/Time
- Event
- Note
- Origin IP
- Protocol: identification of which protocol was used during the execution of the session.
- Remote user
- Session start
- Session end
Info
The report only displays 30 lines per page, to go to the next ones, click on the advance buttons at the end of the report.