> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/rdm/ribbon-menu-bar/reports/activity-logs.md).

# Activity logs

***Activity logs*** provide a robust logging solution. With this feature, it is possible to monitor an open session for all users using [advanced workspaces](https://docs.devolutions.net/rdm/workspaces/workspace-types/native-workspaces/).

{% hint style="info" %}
Depending on the permissions each user has, they may only be able to access [Local connection logs](https://docs.devolutions.net/rdm/commands/reports/logs/). Administrators can go to ***System settings*** – ***Vault*** – ***Logs***, and determine who has acces the ***Activity logs***.
{% endhint %}

{% tabs %}
{% tab title="Windows" %}

#### Search

All activities in the workspace are automatically displayed when opening the ***Activity Logs*** without having to apply any settings. However, search fields are available and can be useful when there are many activity entries. The results can be refined by specifying the ***Date*** or a custom period, the ***Username***, the ***Message***, the ***Machine name***, the ***Folder***, the ***On open comment***, ***On close comment*** and the ***Ticket #***. Select ***All vaults*** to see entries from all other vaults you have access to. It is also possible to choose between ***Local Time*** and ***UTC Time*** and to search in all vaults or in the current vault only. When all the criteria have been chosen, the ***Search*** button will apply them to the results.

![](https://cdnweb.devolutions.net/docs/RDMW6004_2024_2.png)

#### Logs

The log contains all the CRUD operations (add, edit, and delete), passwords being viewed, credentials being used by other sessions, etc. It is possible to right-click an entry to access more options.

![](https://cdnweb.devolutions.net/docs/RDMW6005_2024_2.png)

The information available for each activity line is presented in the following table.

<table><thead><tr><th width="180">OPTION</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td>Folder</td><td>Indicates the folder where your entry is located.</td></tr><tr><td>Connection</td><td>Indicates the connection being used to open your entry.</td></tr><tr><td>Vault</td><td>Indicates the vault in which the action was executed.</td></tr><tr><td>Business unit</td><td>Indicates whether the vault is part of a business unit.</td></tr><tr><td>Message</td><td>Indicates the action that has been executed on your entry or session.</td></tr><tr><td>On Open Comment</td><td>The <em><strong>On Open Comment</strong></em> is defined in the <em><strong>Log</strong></em> tab of your session.</td></tr><tr><td>On Close Comment</td><td>The <em><strong>On Close Comment</strong></em> is defined in the <em><strong>Log</strong></em> tab of your session.</td></tr><tr><td>Log Date</td><td>Indicates the date and time your session was opened or your entry was edited.</td></tr><tr><td>End Date/Time</td><td>Indicates the date and time your session or entry was closed.</td></tr><tr><td>Active Time</td><td>This information is only available for embedded mode sessions. The active time of your session, meaning the time at which your session was open in embedded mode and the time you were active on your session, will be recorded. If your session is open, but you are on the <em><strong>Dashboard</strong></em> tab, for example, and not on you session tab, no active time will be recorded.</td></tr><tr><td>Duration</td><td>This information is only available for embedded mode sessions. When sessions are open in embedded mode, the duration of the session will be recorded. This means that even if you are on the <em><strong>Dashboard</strong></em> tab, for example, and not actively working in your session, but your session tab is open, the session duration will be recorded.</td></tr><tr><td>Machine User</td><td>Indicates the name of the machine user.</td></tr><tr><td>User</td><td>Indicates the connected user's name.</td></tr><tr><td>Connection user</td><td>Indicates the connection user.</td></tr><tr><td>Ticket #</td><td>Indicates the ticket number.</td></tr><tr><td>Machine</td><td>Indicates the machine name.</td></tr><tr><td>Connection Type</td><td>Indicates the connection type that was used.</td></tr><tr><td>Connection Logs ID</td><td>Indicates the unique identifier of the connection log.</td></tr></tbody></table>
{% endtab %}

{% tab title="macOS" %}

#### Search

All activities in the workspace are automatically displayed when opening the ***Activity Logs*** without having to apply any settings. However, search fields are available and can be useful when there are many activity entries. The results can be refined by specifying the ***Date*** or a custom period, the ***Username***, the ***Message***, the ***Machine name***, the ***Folder***, the ***On open comment***, ***On close comment*** and the ***Ticket #***. Select ***All vaults*** to see entries from all other vaults you have access to. It is also possible to choose between ***Local Time*** and ***UTC Time*** and to search in all vaults or in the current vault only. When all the criteria have been chosen, the ***Search*** button will apply them to the results.

![](https://cdnweb.devolutions.net/docs/docs_en_rdm_mac_RDMMac0041.png)

#### Logs

The log contains all the CRUD operations (add, edit, and delete), passwords being viewed, credentials being used by other sessions, etc. It is possible to right-click an entry to access more options.

![](https://cdnweb.devolutions.net/docs/docs_en_rdm_mac_RDMMac0042.png)

The information available for each activity line is presented in the following table.

<table><thead><tr><th width="184">OPTION</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td>Folder</td><td>Indicates the folder where your entry is located.</td></tr><tr><td>Connection</td><td>Indicates the connection being used to open your entry.</td></tr><tr><td>Message</td><td>Indicates the action that has been executed on your entry or session.</td></tr><tr><td>On Open Comment</td><td>The <em><strong>On Open Comment</strong></em> is defined in the <em><strong>Log</strong></em> tab of your session.</td></tr><tr><td>Log Date</td><td>Indicates the date and time your session was opened or your entry was edited.</td></tr><tr><td>End Date/Time</td><td>Indicates the date and time your session or entry was closed.</td></tr><tr><td>Active Time</td><td>This information is only available for embedded mode sessions. The active time of your session, meaning the time at which your session was open in embedded mode and the time you were active on your session, will be recorded. If your session is open, but you are on the <em><strong>Dashboard</strong></em> tab, for example, and not on you session tab, no active time will be recorded.</td></tr><tr><td>Duration</td><td>This information is only available for embedded mode sessions. When sessions are open in embedded mode, the duration of the session will be recorded. This means that even if you are on the <em><strong>Dashboard</strong></em> tab, for example, and not actively working in your session, but your session tab is open, the session duration will be recorded.</td></tr><tr><td>On Close Comment</td><td>The <em><strong>On Close Comment</strong></em> is defined in the <em><strong>Log</strong></em> tab of your session.</td></tr><tr><td>User</td><td>Indicates the connected user's name.</td></tr><tr><td>Machine user</td><td>Indicates the machine user.</td></tr><tr><td>Host</td><td>Indicates the host computer name or IP.</td></tr><tr><td>Connection Type</td><td>Indicates the connection type that was used.</td></tr></tbody></table>
{% endtab %}
{% endtabs %}

#### See also

* [Devolutions Academy - Leveraging Logs, Reports, and Audits](https://academy.devolutions.net/student/path/1925316/activity/2668002)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/rdm/ribbon-menu-bar/reports/activity-logs.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.