VaultOne: Monitor PAM Servers and Computers

VaultOne provides robust auditing capabilities to help you monitor computer access and analyze activity logs. Use the steps below to review who accessed computers, when connections occurred, and additional session details.

Requirements

• Ensure you have the necessary permissions to access audit logs and computer connection records within VaultOne

Reviewing Computer Access Logs

1. To see who accessed computers, navigate to Administration → Audit Log
2. In the Audit Log, filter by the action OpenConnection to view all instances where users initiated a connection to a computer.

After a user disconnects, you can also track this event by filtering for the action CloseConnection in the same Audit Log section.

Viewing Connection Details and Session Recordings

For a more detailed view of computer connections, including session times and video recordings (if enabled), follow these steps:

1. To see who accessed computers, navigate to Administration → Audit Log → Session History
2. On the Session History page, you can see:
   • Who connected to each computer
   • The date and time of each connection
   • Video recordings of sessions, if this feature is enabled