User API Logs

Navigate to Inventory > User Api Logs to view the user API logs created by Threat Defender.

Click Create Report if you wish to create a downloadable PDF report on the user API logs. The report contains the entire user API logs.

The chart displays the events logged in the past 24 hours over time. Logged events are login and logout of users.

The table displays the logged user API events. You can filter the entries using the filter_icon filter field above the table. Alternatively, you can filter the log table by hovering the mouse over one of the cells and clicking filter_icon to include or filter-remove_icon to exclude the respective elements from the results.

The table contains the following information:



Created At

The date and time the event was logged.


The state of the logged event, i.e. whether it was successful or failed.


The tag assigns the event to a certain log.


The action logged, i.e. login or logout of users.


A message describing the event.


The login name of the user involved in the event.

User IP Address

The IP address of the user involved in the event.

Click the view_icon in the last table column to access the respective log entry under Logging > Audit Logs.