• Cloud Edge Secure Access
• Welcome to SonicWall Cloud Edge!
• Prerequisites
• Installation
  • Accessing the Client Management Console
  • Installation Methods
• Networks
  • Understanding Networks
  • SDP Networks
  • Regions and Gateways
    • Adding a region
    • Adding a gateway
  • Connecting Infrastructure
    • Prerequisites
    • Site-to-Site Connections
    • IPsec Tunnel
    • WireGuard Connector
    • Connect On-Prem Resources
      • Firewalls
        • SonicWall
    • Connect Cloud Resources
      • Amazon AWS
        • AWS Virtual Gateway
        • AWS Transit Gateway
      • Alibaba Cloud
      • Microsoft Azure
      • Google Cloud Platform
      • Heroku Enterprise
      • IBM Cloud
      • Docker
• Groups and Members
  • Members
    • Inviting Members
    • Password Requirements
    • Managing Roles
  • Groups
    • Managing Groups
    • Identity Provider Groups
  • Identity Providers (IdP)
    • Integrate Identity Providers
    • Azure AD
      • Azure Active Directory (SAML 2.0)
      • Azure Active Directory
    • Google Suite
      • Google Services
      • Google Apps (SAML 2.0)
    • On-Premises Active Directory
    • SAML 2.0
      • Generic SAML
      • Active Directory Federation Services (ADFS)
      • Auth0
      • Okta
      • OneLogin
      • PingIdentity
      • JumpCloud
• Securing the Platform
  • Securing Networks
    • Segmenting Networks
    • Device Posture Check
    • Network Traffic Control
    • Firewall-as-a-Service
  • Securing User Access
    • Multi-Factor Authentication
      • MFA Authentication
      • DUO Security
    • Agent-less Access
      • Zero Trust Application
        • HTTP/HTTPS
        • RDP (Remote Desktop Protocol)
        • SSH (Secure Shell)
        • VNC (Virtual Network Computing)
      • Zero Trust Policies and Rules
    • Agent-based Access
      • SonicWall Agents
        • Downloading and Installation
      • Agents Configuration
        • User-Groups Policies
        • Managing Configurations
        • General Configurations
        • Network Configuration
        • OS-Specific Configurations
• Monitoring
  • Activity Tracking
    • Activities and Logs
    • Member Devices
  • Monitoring Dashboard
  • Integrations
    • Amazon S3
    • Azure Sentinel
    • Splunk Cloud
• Compliance
  • HIPAA
  • GDPR
  • SOC 2 Type 2
• SonicWall Support
  • About This Document

Activities and Logs

This article describes how to use the Activity Log. Whether it be the status of your server deployments, new groups created, or recent logins, your Activity Log is the place where you can quickly get the full picture of what’s going on with your network.

Finding System Activity Logs

1. To view your system’s activity, select System Activity in the Monitor and Logs section on the left side.

2. You’ll see a list of team members, the date of their last activity, their latest activity on the platform, and the server location they connected to.

   

3. In the menu at the top of the screen, you can sort activities by type, date range, team member, and network (server location). You can even export this data if you wish.

Finding Device Activity Logs

1. To view your system’s activity, select Device Activity in the Monitor and Logs section on the left side.

2. You’ll see a list of device posture check, device name, member name, attached policy, status, and the device operating system.

   

3. In the menu at the top of the screen, you can view a graph of the total devices, operating system percentage and their health status percentage.

Monitored Activities

Authentication

Event

User successfully logged into the agent

User failed to log into the agent

User successfully logged into a gateway

User failed to log into a gateway

Groups

Events

Group created

Group deleted

Member added to group

Member deleted from group

Group assigned to network

Group detached from network

Members

api.activity.network.dnsFiltering.remove

Event

Network deployed

Network deployment failed

Network destroyed

Region added

Region removed

Gateway added

Gateway removed

Gateway restarted

Tunnel added

Tunnel removed

Tunnel updated

Zero Trust Application

Event

Application added

Application deployment failed

Application updated

Application removed

Application user authorisation

Application user failed authorisation

Application session started

Application session ended

Zero Trust Applications Policy

Event

Policy added

Policy updated

Policy deleted

IdP

Event

IdP added

IdP disabled

IdP deleted

Integration

Event

Integration created

Integration disabled

Integration enabled

Integration deleted