Monitor user activities

Supported in:

This document explains the Audit feature and its associated user activities in a list-based format, providing a comprehensive view of platform actions.

Access the Audit page

To open the Audit page, go to Settings > Advanced > Audit.

The Audit page displays the following key user activity metrics:

  • Most Common Activities
  • Most Common Resolutions
  • Most Active Users
  • Most Active Addresses
  • Most Common Browsers

View activity log and filtering

You can filter the activities list by user, count, or group to find specific activities.

To view activity details, follow these steps:

  • Click View More on any row to open the Activity Details side drawer. This view includes the following information:
    • Time: Time of the activity.
    • User: User who performed the activity.
    • Module: Affected system module.
    • Activity Type: Action performed.
    • Address: IP address from which the activity originated.
    • Browser: Browser used for the activity.
    • Screen Size: Screen resolution used for the activity.
  • Click the required activity value to view the information in New Activity Values or Previous Activity Values.
  • Click the relevant activity row and click the toggle to the ON position to view New Activity Values and Previous Activity Values.

You can view New Activity Values and Previous Activity Values side-by-side in a JSON viewer to investigate more efficiently.

Need more help? Get answers from Community members and Google SecOps professionals.