Overview

• To view logs:
  1. In the left navigation panel, click LOGS. The Edit Filter page opens.
  2. Make selections for the date range of the logs, and characteristics of content to include in the log. Click Apply Filters.

     Your filter selections remain in effect for the current session only.

     You can specify:

     • Date. Start and end dates and times to include in the log. .All Day sets start time at 12:00 AM, and the end time to 11:59 PM.
     • Action. General action types, such as Administration, File Transfer, Uploads, etc.
     • User. username, full name, or a partial username.
     • File: File ID or a file name. (For file transfers only, wildcard characters accepted for file name.)
     • Size: File size. (For file transfers only, Greater than, Less than.)
     • Folder. Specific folder.
     • IP Address: IP address from which actions were initiated. (Wildcards accepted.)
     • Agent Brand. Agent name (for example: "Mozilla" or "MOVEit Automation").
     • Success/Failure. All entries, only failed entries, only successful entries.
  3. Click Apply Filters.

Logs Page

The columns and content customizable through the "Customize View" (columns) and "Edit Filter" (content) links. Pre-defined filters, both built-in and custom, can be accessed by clicking the "Favorite Filters" link, and custom views can be saved by clicking the "Save Current View to Favorites" link. Finally, navigation links ("Go to Page") allow users to page through log entries.

Note: To conform with Payment Card Industry (PCI) requirements, MOVEit Transfer creates an audit log record every time the audit log is viewed. A "View Audit Log" record is written when a list of log records is viewed, including every run of any report that accesses the audit log. A "View Audit Log Entry" record is written every time the details of an individual audit log record are viewed. To avoid the display of these records, use "Suppress Log Views" in the Customize View options.

Users, files, and folders that are referenced by log entries can usually be clicked on to view the information page for that item. The date/time value of each log entry can be clicked on to view the details for that particular entry. A certificate icon next to the date/time value indicates that this log entry contains client certificate information, meaning the user who did the action was signed on with a client certificate at the time. The details of the client certificate will be displayed on the log entry page.

Log Entry

Clicking on the Date/Time link for a specific entry in the list of log entries brings up the Log Entry page for that entry.

This page contains all the information available about the entry including when the entry was added, who was responsible for the action, a description of the action that took place, the success or failure code of the action, and any notes and/or further details about the action. A link to return to the main Logs page is also available, which will return the user to the same Logs page they arrived from.

View User Logs

Each user profile has a "View User Logs" link which administrators can use to define a log filter that returns log information about just that user.

Clicking the link leads to a filter specification page, which allows the admin to select a user to view log information about. Clicking on the Apply Filters button will execute the user filter and show the log entries associated with the selected user.

Customize View

The "Customize View" link will bring up a form which allows users to select the columns displayed in the advanced file view. Changes to these selections will be saved and pre-filled during future log page visits, even between sessions. At least one column must be selected here, or an error will be displayed.

File Columns:

• Name: The original name of the file
• ID: The seven-digit ID of the file
• Folder Name: The name of the MOVEit Transfer folder in which this file is currently stored
• Size: The size (in bytes) of the file or secure message
• Duration: The length of time (in seconds) it took to transfer the file
• Rate: The data transfer rate of the file transfer (in bytes/second)

User Columns:

• Username: The username of the user (i.e. "fsmith") who performed this action
• Full Name: The full name of the user (i.e. "Fred Smith") who performed this action
• Target Name: The full name of the user this action affected
• IP Address: The IP address from which this action was initiated

Other Columns:

• Action: The action performed
• Notes: Additional notes regarding this action
• Client: The client type and version from which this action was performed. Icons will be displayed for known client types, and unknown client types will have their full agent identification string displayed.

Special Options:

• Suppress Sign On/Sign Off: Used to hide or show sign on or sign off entries in the log. (Often people are only interested in specific actions users performed rather than the times they were signed on.)
• Suppress Email Notes: Used to hide or show email notification entries in the log.
• Suppress Log Views: Do not display log view records. (To conform with PCI requirements, a record is created each time the audit log, or an audit log entry is viewed.)
• Use Large Text: Increases the font size used in the table of entries

Entries per Page:

• Sets the number of entries displayed on each page.

Edit Filter

The "Edit Filter" allows users to select the content displayed in the advanced file view.

Favorite Filters

The "Favorite Filters" link will bring up a page which allows users to select a saved custom view, or one of several commonly requested filters involving file transfers, administration, or all activities. The "Define Advanced Filter" link will pop up the Edit Filter form described above.

Save Current View to Favorites

Favorite views (combinations of column and record count preferences and filter options) can be saved to the Favorite Filters page by setting up the view using the "Customize View" and "Edit Filter" links, then clicking the "Save Current View to Favorites" link. The user will be prompted to enter a name for the new view, or use the name of the currently selected view, if they would like to update it. Once a custom view has been saved, it can be loaded again from the Favorite Filters page.