The Events page shows the activities of the files and folders in a share.



To generate a list of events:

  1. Filter sessions and build a searchable Event Stream
  2. Search in the Event Stream
  3. View Results



1. Filter Sessions and Build a Searchable Event Stream

Create an Event Stream by importing event logs via Session ID or filter. You can also use an existing saved Event Stream.



Create Event Stream by Session ID

Choose the "Session ID" or "Session ID (use Cache if possible)" options to filter by session ID.


Use "Session ID" if the session may still be open and new events for the session may still be recorded.  For older sessions that are already closed, use the "Session ID (use Cache if possible)" option for faster performance.


To find the session ID, use the Sessions section of the Audit app.  For more information, see the following article:


Sessions


Create Event Stream by Filter

Choose the "Filter" radio option to import a filtered set of events. The following filters can be used:

  • Period
  • Since (start date)
  • Until (end date)
  • User ID
  • Gateway (including Team Portal)
  • Share

Since

Specify the start date of the events.


Until

Specify the end date of the events.


User

Filter by users who performed the event.


Gateway

Filter by the CacheDrive on which the event occurred.


Share

Filter by the share on which the event occurred.


Event Stream by Session ID

Enter a Session ID to import event logs from that session. Session IDs can be found on the Sessions page.


Event Steam from Cached Event Stream

Import event logs from a previously created Event Stream. View and manage saved Event Streams on the Saved Event Stream page.


Click CREATE EVENT STREAM to complete the process.



2. Search in the Event Stream

Once an Event Stream is created, admins can filter the event logs to generate reports or gain other insights on how the system is being utilized.



The Event Stream can be filtered using the following criteria:

  • Since (start date)
  • Until (end date)
  • User
  • Gateway (including Team Portal)
  • Share
  • Path Prefix
  • Path Suffix
  • Path Containing


The results can also be filtered by event type.

  • Includes Create
  • Includes Modify
  • Includes Delete
  • Includes Read Data
  • Includes Write Data
  • Includes Alternate Data Stream
  • Includes Meta Data Stream



Click SHOW DETAILS to view the results.



3. View Results

View a list of all events that meet the specified search criteria in the Event Stream.


Use different time zones to display events according to your needs.

  • Use UTC Time Zone
  • Use Local (Browser) Time Zone
  • Use Time Zone Set in Preference


Choose which columns to display in the results list. Data can be sorted by clicking on the column header.

  • Date/Time
  • Gateway
  • User ID
  • Operation
  • Share
  • Path
  • IP Address
  • Host



Saving Search Results

Administrators can save the search results as a CSV file by entering a name for the CSV file and click the "Save" icon.



You can download the saved CSV files from the Saved Event Stream page.