# Access logs

## Description

<p class="callout success">The access log page allows querying all the information about the opened sessions. </p>

Note that any session that was active during the specified date will be shown, even when it started before of finished after that date.

<div id="bkmrk-screen-overview"><span style="color: #222222; font-size: 2.8275em; font-weight: 400;">Screen overview</span></div><div id="bkmrk-"><span style="color: #222222; font-size: 2.8275em; font-weight: 400;"><iframe allowfullscreen="allowfullscreen" height="314" src="//www.youtube.com/embed/rnTFtLeyi3k?rel=0" width="560"></iframe>

</span></div>[![image.png](https://bookstack.soffid.com/uploads/images/gallery/2025-08/scaled-1680-/2xWlzPGz2XSsTZTa-image.png)](https://bookstack.soffid.com/uploads/images/gallery/2025-08/2xWlzPGz2XSsTZTa-image.png)

<div id="bkmrk--0"></div><div id="bkmrk-custom-attributes"><span style="color: #222222; font-size: 2.8275em; font-weight: 400;">Related objects</span></div><div id="bkmrk-sessions-%3A-session-o">- [Sessions](https://bookstack.soffid.com/books/soffid-4-reference-guide/page/sessions) : session object
- [Users](https://bookstack.soffid.com/books/soffid-4-reference-guide/page/users) : for the user and full name data
- [Agents](https://bookstack.soffid.com/books/soffid-4-reference-guide/page/agents) : agent object
- [Jump server group](https://bookstack.soffid.com/books/soffid-4-reference-guide/page/configure-pam-session-servers) : jump server configuration

</div><div id="bkmrk--3"></div><div id="bkmrk-standard-attributes"><span style="color: #222222; font-size: 2.8275em; font-weight: 400;">Standard attributes</span>  
<svg class="svg-icon" data-icon="link" role="presentation" viewbox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">`</svg></div>- **Type**: access log type, values: 
    - logon
- **Protocol**: access protocolva, values: 
    - CONSOLE
    - HTTP
    - wsso
    - esso
    - PAM
    - PAMRDP
    - PAMSSH
- **Start date**: date and time when access started.
- **End date**: date and time when access ended.
- **Session**: session identifier.
- **Server**: server where the authentication has been applied
- **Client**: server where the user started the session
- **IP Address**: IP of the server where the user started the session
- **Information**: additional connection information. 
    - When the information is about the Authentication method, there are the following options: 
        - **P**: Password
        - **K**: Kerberos
        - **E**: Broker
        - **O**: OTP
        - **M**: Email
        - **S**: SMS
        - **I**: PIN
        - **C**: Certificate
        - **F**: Finger print
        - **Z**: Push
    - **Account**: account used to apply the login
    - **User**: user who perform the access. The object is linked to the user screen.
    - **Full name**: full name of the user who perform the access. The object is linked to the user screen.
    - **Agent**: when the authentication is applied throught an agent.
    - **Jump server group**: when the authentication is applied inside a jumpserver group.
    - **Target application**: application where the authentication has been applied

## Actions

<table border="1" id="bkmrk-add-or-remove-column" style="width: 805px;"><tbody><tr><td style="width: 176.944px;">**"Query buttons"**</td><td style="width: 626.944px;">Allows you to query accounts through different search systems, [Quick and Advanced](https://bookstack.soffid.com/books/soffid-3-reference-guide/page/search-types "Search Types").</td></tr><tr><td style="width: 176.944px;">**"Table filter"**</td><td style="width: 626.944px;">It allows you to filter a column in the table based on the results loaded in it.</td></tr><tr><td style="width: 176.944px;">**Download CSV file**</td><td style="width: 626.944px;">Allows you to download a csv file with the information of audit records. </td></tr><tr><td style="width: 176.944px;">**View**</td><td style="width: 626.944px;">Allows you to add or remove columns to the table.

It is also possible to change the order of the columns.

</td></tr></tbody></table>