Monitor activities

This topic describes how to monitor activity on Remote Access.

Overview

As a Remote Access administrator, you can view a full history of activities that have been performed in Remote Access. You can filter activities by timeframe and activity type, and search for specific details such as site, application, username, and more.

Starting March 1st, 2024, Remote Access will implement a revised audit retention policy requiring the retention of all tenants’ audit records for three years.

View activities

To view the Remote Access audit log of activities, go to Remote Access portal > Activities page.

In the Activities list, expand any activity to see more details.

Timeframe filters

Display activities according to the following predefined time-frame filters.

Filter

Values

Time-frames

  • 15 minutes ago
  • 30 minutes ago
  • 1 hour ago
  • 24 hours ago
  • Custom (From - To)

Activity filters

Display activities according to the following predefined activity filters.

Filter

Values

Applications
  • Application added
  • Application deleted
  • Application hidden
  • Application login blocked
  • Application published
  • Application updated
  • Application user login
  • Application Vendor login
  • Identity application Vendor login
  • Offline password retrieved
  • Secure Native RDP access blocked
  • Secure Native RDP access user response
Certificates
  • Application certificate added
  • Application certificate deleted
Company users
  • User activated
  • User deactivated
  • User deleted
  • User invitation created
  • User joined
  • User role changed
  • Username changed
Connectors
  • Connector added
  • Connector deleted
  • Connector extended
  • Connector initialized

Groups

  • Group created
  • Group deleted
  • Group updated

Roles

CyberArk Identity Roles synced

Service Accounts
  • Service account activated
  • Service account added
  • Service account deactivated
  • Service account deleted
Settings
  • Company details settings updated
  • Settings updated
Sites
  • Site added
  • Site deleted
  • Site updated
Tenants
  • Alias updated
  • Tenant created
  • Tenant sign in
Vendors
  • Vendor activated
  • Vendor deactivated
  • Vendor deleted
  • Vendor invitation created
  • Vendor invitation deleted
  • Vendor joined
  • Vendor re-verified by email
  • Vendor updated

Vendor admins

  • User role changed

  • Vendor Manager updated