Directory Insights (DI) is JumpCloud’s event logging and compliance feature. Directory Insights shines a light on audit trails leading up to critical events so you know the what, where, when, how, and who of your directory activities.<\/p>\n\n\n\n

You can use our RESTful API, PowerShell Module, and Administrator Portal to access event logs, see activity happening in your directory, and monitor user authentications to the User Portal, SAML SSO applications, RADIUS, and LDAP. <\/p>\n\n\n\n

Directory Insights supports events from the following JumpCloud services and logs the following information:<\/p>\n\n\n\n

\n
• Alert Events<\/strong>: Creation and status updates of alerts in JumpCloud.<\/li>\n\n\n\n
• Directory Events<\/strong>: Activity in JumpCloud Portals, including admin changes in the directory and admin \/ user authentications to the Admin and User Portals. <\/li>\n\n\n\n
• Software (SAML) Events<\/strong>: User authentications to SAML applications.<\/li>\n\n\n\n
• RADIUS Events<\/strong>: User authentications to RADIUS used for WiFi and VPNs.<\/li>\n\n\n\n
• Systems Events <\/strong>(MacOS, Windows, and Linux):\u00a0<\/strong>User logins and authentications to devices, including agent-related events on lockout, OS upgrades and rollback events, password changes, and Full Disk Encryption.<\/li>\n\n\n\n
• LDAP Events<\/strong>: User authentications to LDAP, including LDAP bind and search event types.<\/li>\n\n\n\n
• MDM Events<\/strong>: MDM command results.<\/li>\n\n\n\n
• Managed Service Provider Events<\/strong> (MTP only): Activity in JumpCloud Multi-Tenant Portal (MTP) including admin changes, organization changes, and integration events.<\/li>\n\n\n\n
• SSO<\/strong>: When an authorized SSO connector is created, updated, or deleted, as well as when a user authenticates to an SSO application.<\/li>\n\n\n\n
• Password Manager<\/strong>: Invites, activations, and deactivation of users, as well as all events related to folders and their members, including their assigned permissions.<\/li>\n\n\n\n
• Object Storage<\/strong>: Creation, uploads, URL generation, and deletion of custom software apps. <\/li>\n<\/ul>\n\n\n
  \n

  <\/figure><\/div>\n\n\n

  Enabling Directory Insights<\/h2>\n\n\n\n

  Directory Insights is included in some of our package plans. See JumpCloud Pricing<\/a> for information on our package plans. To enable Directory Insights for your account, current customers can contact their Account Manager. New customers can contact us at directoryinsights@jumpcloud.com<\/a>.<\/p>\n\n\n\n

  Once this is available for your account, learn how to enable it in your Admin Portal in Settings in the Admin Portal – Directory Insights<\/a>. <\/p>\n\n\n\n

  Querying Directory Insights Data<\/h2>\n\n\n\n

  After Directory Insights is enabled for your account, you can use the JumpCloud API<\/a> and JumpCloud PowerShell Module<\/a> to query and report Directory Insights information.<\/p>\n\n\n\n

  Viewing and Exporting Directory Insights Data<\/h2>\n\n\n\n

  You can view Directory Insights data in the Administrator Portal from Insights <\/strong>> Directory<\/strong>. Learn about viewing and exporting data in the View the DI Data Activity Log<\/a>.<\/p>\n\n\n\n

  Directory Insights Data Retention<\/h2>\n\n\n\n

  JumpCloud stores 90 days of event logs and removes logs older than 90 days. If you want to store data for longer periods of time, our AWS Serverless Application<\/a> automatically exports Directory Insights events to a customer’s S3, where you have options to store events for more than 90 days. See our API docs<\/a> for more information.<\/p>\n","protected":false},"excerpt":{"rendered":"

  Directory Insights (DI) is JumpCloud’s event logging and compliance feature. Directory Insights shines a light on audit trails leading up […]<\/p>\n","protected":false},"author":207,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2912,2853],"support_tag":[],"coauthors":[2843],"acf":[],"yoast_head":"\n