Multi-Tenant Management — Session and User Actions

Applies To: WatchGuard Advanced EPDR This topic applies to the WatchGuard Advanced EPDR endpoint security product., WatchGuard EPDR This topic applies to the WatchGuard EPDR endpoint security product., WatchGuard EDR This topic applies to the WatchGuard EDR endpoint security product., WatchGuard EDR Core This topic applies to the WatchGuard EDR Core endpoint security product., WatchGuard EPP This topic applies to the WatchGuard EPP endpoint security product.

To open the multi-tenant management UI for endpoint security, your Service Provider account must have an active Endpoint Security product license in its inventory.

As a Service Provider, you can see log information for the user and session activity in your managed accounts on the Users page. For session activity, the IP address is also available.

You can filter and export results to a CSV file. For more information, go to Export Activity Logs.

To filter the activity logs, from WatchGuard Cloud:

1. From Account Manager, select a Service Provider account.
   To select your own Service Provider account, select Overview. Or, select a tier-n Service Provider account.
2. Select Configure > Endpoint Security.
3. Select Settings > Management.
   The Activity page for Users opens.
4. Select the type of activity you want to view (Sessions or User Actions).

5. To filter the subset of activities, select Filters.

6. In the From and To text boxes, specify the date range you want to show actions for.
7. From the Users list, select the accounts you want to show activities for.
8. Click Filter.

Export Activity Logs

You can export activity logs to a comma-separated value (CSV) file that they can use in other applications.

To export activity logs, from WatchGuard Cloud:

1. From Account Manager, select a Service Provider account.
   To select your own Service Provider account, select Overview. Or, select a tier-n Service Provider account.
2. Select Configure > Endpoint Security.
3. Select Settings > Management.
   The Activity page for Users opens.
4. Select the type of activity you want to view (Sessions or User Actions).
5. Filter the subset of activities, if required.
6. To export the results, click in the upper-right corner of the window.
   The browser automatically downloads a CSV file of the results.

Related Topics

About Multi-Tenant Management in Endpoint Security