---
title: "Session Events"
slug: "auditing-session-events"
updated: 2026-11-03T14:57:58Z
published: 2026-11-03T14:57:58Z
canonical: "docs.senhasegura.io/auditing-session-events"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Session Events

This document contains detailed information about the Session events report, where you can view all the commands that were executed in a remote session.

## Access Session events

1. At the Segura™ Platform, in the upper left corner click on the **Product menu** and select **Reports**.
2. Select **Events > Session events**.

---

## Homepage buttons

| **Item** | **Description** |
| --- | --- |
| **Show filters** | It's identified by the magnifying glass icon. It displays or hides the search fields on the screen. |
| **Update** | It's identified by the counterclockwise arrow icon. It refreshes the page. |
| **View actions** | It's identified by the three vertical dots icon. It's a menu with possible actions for the report. |
| **Print report** | It's the option identified by the printer icon. It opens a new page for printing the report. |
| **Export CSV** | It's the option identified by the paper sheet icon. It downloads the report. |
| **Schedule report** | It's the option identified by the clock icon. It opens the Schedule report form. |

Info

When clicked, the **question mark** displayed on the page, sends you to the correct documentation.

---

## Search fields

| **Item** | **Description** |
| --- | --- |
| **Session ID** | Identification number from the opened session. |
| **Date/Time** | Date and time of each command executed during the session. |
| **until** | End date for search events. |
| **Event** | Event type that can be executed during the session. |
| **Note** | Note message. |
| **Segura user** | Name from Segura™ user. |
| **Origin IP** | IP origin number. |
| **Host** | Host number from the session. |
| **Remote user** | Username from the remote user. |
| **Filter** | Button to filter and show the results according to your chosen preferences. |
| **Clear** | Clear all the text boxes with the options that were previously chosen. |

At **Events** field, it’s possible to have several kinds of events, such as:

- Files changed
- Files purged
- Created
- Drop session
- Exported Details
- Video Download
- Video Emission
- Blocked Event
- Observed Event
- Prohibited Event
- Terminated
- Started
- Interactivity blocked
- Interactivity blocked (attempted)
- Interactivity unlocked
- Interactivity unlocked (attempted)
- Live Stream
- Log viewer
- Session Play
- File transfer
- Transfer limit
- Transfer refused

---

## Report fields

- **ID**: The sequential number identifies the order of executed commands.
- **Session ID**
- **Date/Time**
- **Event**
- **Note**
- **Origin IP**
- **Protocol**: identification of which protocol was used during the execution of the session.
- **Remote user**
- **Session start**
- **Session end**

Info

The report only displays 30 lines per page, to go to the next ones, click on the advance buttons at the end of the report.