Session events

Article summary

Did you find this summary helpful?

Thank you for your feedback

This document provides information about the Session events report screen, which displays all the commands executed in a remote session.

Path to access

On senhasegura, in the navigation bar, hover over the Products menu and select PAM Core.
In the side menu, select Audit > Sessions > Session events.

Item	Type	Description
Session ID	Text field	Filters the events by their unique session identification hash generated by senhasegura. Note: this identifier is used internally by the application for session-related operations such as access control, activity tracking, and resource management. Each time a session is started, a new hash is generated for that specific session.
Date/Time	Date picker	Filters the events by the period in which they were held.
Event	Dropdown menu	Filters the events by the type of event executed during the session. Note: the types of events are listed in Possible event types below.
Note	Text field	Filters the events by the note message.
Senhasegura user	Text field	Filters the events by the senhasegura user who executed the commands.
Origin IP	Text field	Filters the events by the IP origin address.
Host	Text field	Filters the events by the session host.
Remote user	Text field	Filters the events by the remote user’s username.

Possible event types:

ID: the sequential number that identifies the order of executed commands.
Session ID.
Date/Time.
Event.
Note
Origin IP.
Protocol: identification of which protocol was used during the execution of the session.
Host.
Remote user.
Session start.
Session end.

Info

By default, the report displays 30 records per screen. To go to the next screen, click the forward buttons at the end of the report.

Was this article helpful?

On this page