The Events page shows the activities of the files and folders in a share.
To generate a list of events:
- Filter sessions and build a searchable Event Stream
- Search in the Event Stream
- View Results
1. Filter Sessions and Build a Searchable Event Stream
Create an Event Stream by importing event logs via Session ID or filter. You can also use an existing saved Event Stream.
Create Event Stream by Session ID
Choose the "Session ID" or "Session ID (use Cache if possible)" options to filter by session ID.
Use "Session ID" if the session may still be open and new events for the session may still be recorded. For older sessions that are already closed, use the "Session ID (use Cache if possible)" option for faster performance.
To find the session ID, use the Sessions section of the Audit app. For more information, see the following article:
Create Event Stream by Filter
Choose the "Filter" radio option to import a filtered set of events. The following filters can be used:
- Period
- Since (start date)
- Until (end date)
- User ID
- Gateway (including Team Portal)
- Share
Since
Specify the start date of the events.
Until
Specify the end date of the events.
User
Filter by users who performed the event.
Gateway
Filter by the CacheDrive on which the event occurred.
Share
Filter by the share on which the event occurred.
Event Stream by Session ID
Enter a Session ID to import event logs from that session. Session IDs can be found on the Sessions page.
Event Steam from Cached Event Stream
Import event logs from a previously created Event Stream. View and manage saved Event Streams on the Saved Event Stream page.
Click CREATE EVENT STREAM to complete the process.
2. Search in the Event Stream
Once an Event Stream is created, admins can filter the event logs to generate reports or gain other insights on how the system is being utilized.
The Event Stream can be filtered using the following criteria:
- Since (start date)
- Until (end date)
- User
- Gateway (including Team Portal)
- Share
- Path Prefix
- Path Suffix
- Path Containing
The results can also be filtered by event type.
- Includes Create
- Includes Modify
- Includes Delete
- Includes Read Data
- Includes Write Data
- Includes Alternate Data Stream
- Includes Meta Data Stream
Click SHOW DETAILS to view the results.
3. View Results
View a list of all events that meet the specified search criteria in the Event Stream.
Use different time zones to display events according to your needs.
- Use UTC Time Zone
- Use Local (Browser) Time Zone
- Use Time Zone Set in Preference
Choose which columns to display in the results list. Data can be sorted by clicking on the column header.
- Date/Time
- Gateway
- User ID
- Operation
- Share
- Path
- IP Address
- Host
Saving Search Results
Administrators can save the search results as a CSV file by entering a name for the CSV file and click the "Save" icon.
You can download the saved CSV files from the Saved Event Stream page.