Session protection reporting
Early Access release. See Enable self-service features.
You can search the System Log records to find session protection events.
-
To see events that resulted in a policy re-evaluation, query eventType eq "user.session.context.change" && ArePoliciesEvaluated = true
-
To see events that failed policy re-evaluation, query eventType eq "policy.auth_reevaluate.fail"
-
To see when session protection enforcement settings for groups were evaluated, query eventType eq "policy.auth_reevaluate.enforce"
-
To see when an enforcement action (workflow or logout) was executed, query eventType eq "policy.auth_reevaluate.action"
System Log events are available from the Reports page and individual user profiles.
View events in System Log
-
In the Admin Console, go to .
-
Configure the date range and enter a username.
-
Click the magnifying glass icon beside the Search field.
View events from a user's profile
-
In the Admin Console, go to .
-
Select a user.
-
In a user's profile, click View Logs.
-
Configure the date range, and then click the magnifying glass icon beside the Search field.
