Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Working with the Cisco Account Audit Log

The Cisco Account audit log provides a history of identity and access events for your organization, such as login attempts and other authentication activity. Use the audit log to investigate access events, verify user activity, and generate reports for security or compliance review.

You view Cisco Account audit log events in the Cisco Identity portal, the admin portal used to manage Cisco Account identity settings. Use the ThousandEyes activity log for user and system actions in the ThousandEyes platform, such as test changes, account group changes, and other platform activity.

Viewing the Audit Log

  1. In ThousandEyes, go to Manage > Account Settings > Organization Settings.

  2. In the Single Sign-On (SSO) section, select Go to admin portal.

  3. In the Cisco Identity portal, select Audit from the left navigation.

Cisco Account audit log table in the Cisco Identity portal

The audit log shows identity events in a table. The main components in this screen are:

Audit Log Table

For each event, the audit log shows:

  • Date & time: The timestamp for the event.

  • Performed by: The user or account associated with the event.

  • Status: The result of the event, such as Success.

  • Category: The event category, such as Sign-in.

  • Summary: A short description of the event.

Time Range Selector

Use the time range selector to choose the period of events shown in the table. For example, select Last 24 hours to show recent activity.

Search and Filters

Use Search to find matching audit log entries. Use Category, Status, and Filters to narrow the events shown in the table.

Generating a Report

Select Generate report to create an audit report from the Cisco Identity portal. The report is generated as a CSV file for you to download.

Related Information

PreviousWorking with the Activity LogNextThousandEyes User Session Timeouts and Terminations

Last updated