User and Session Activity in Endpoint Manager

Applies To: WatchGuard EPDR, WatchGuard EDR, WatchGuard EPP

In Service Provider Endpoint Manager, on the Settings > Management > Users page, you can see log information for users and session activity, such as the date, user, action or activity, item type, and item. For session activity, the IP address is also available.

You can filter the results and export results to a CSV file. For more information, see Export Activity Logs.

To filter the activity logs:

  1. In Service Provider Endpoint Manager, from the top navigation bar, select Settings.
  2. From the left pane, select Management.
    The Activity page for Users opens.
  3. Select the type of activity you want to view (Sessions or User Actions).

  1. To filter the subset of activities, select Filters.

Screen shot of Service Provider Endpoint Manager, User actions filter

  1. In the From and To text boxes, specify the date range you want to show actions for.
  2. From the Users list, select the accounts you want to show activities for.
  3. Click Filter.

Export Activity Logs

You can export activity logs to a comma-separated value (CSV) file that you can use in other applications.

To export activity logs:

  1. In Service Provider Endpoint Manager, from the top navigation bar, select Settings.
  2. From the left pane, select Management.
    The Activity page for Users opens.
  3. Select the type of activity you want to view (Sessions or User Actions).
  4. Filter the subset of activities, if required.
  5. To export the results, click in the upper-right corner of the window.
    The browser automatically downloads a CSV file of the results.

See Also

About Service Provider Endpoint Manager