{"id":76630,"date":"2023-06-05T13:11:46","date_gmt":"2023-06-05T17:11:46","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=76630"},"modified":"2024-08-01T11:22:44","modified_gmt":"2024-08-01T15:22:44","slug":"view-the-directory-insights-data-activity-log","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log","title":{"rendered":"View the Directory Insights Data Activity Log"},"content":{"rendered":"\n<p>The&nbsp;Directory Insights&nbsp;Activity Log includes an event frequency chart and a table with individual events for the selected time range. Directory Insights data is useful for auditing &amp; compliance or for troubleshooting issues like user lockouts.<br><br><strong>Considerations<\/strong>:<\/p>\n\n\n\n<ul>\n<li>JumpCloud&nbsp;stores Directory Data for 90 days. Any views in the admin console will only reflect the previous 90 days of activity. If you need to store data longer than 90 days, consider&nbsp;the <a href=\"https:\/\/jumpcloud.com\/support\/jumpcloud-directory-insights-aws-serverless-application\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Directory Insights AWS Serverless Application<\/a>&nbsp;or export the logs directory using the&nbsp;<a href=\"https:\/\/docs.jumpcloud.com\/api\/insights\/directory\/1.0\/index.html\" target=\"_blank\" rel=\"noreferrer noopener\">Directory Insights API<\/a>.<\/li>\n\n\n\n<li>You can export Directory Insights data in JSON or CSV format. <\/li>\n<\/ul>\n\n\n\n<p><strong>Prerequisites<\/strong>:<\/p>\n\n\n\n<ul>\n<li>Directory Insights has to be enabled for your account. Email your Account Manager to get this enabled.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Chart View<\/h2>\n\n\n\n<p>The Activity Log chart shows a graph of the number of events that occurred during the selected time range. You can click a bar in the chart to view data for that bar&#8217;s time range.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-list-view\">List View<\/h2>\n\n\n\n<p>The Activity Log list shows event data in the following default columns:<\/p>\n\n\n\n<ul>\n<li><strong>Timestamp<\/strong>: When the event happened; the date and time on which the event occurred.<\/li>\n\n\n\n<li><strong>Event Type<\/strong>: The event type. Events are gathered from the following services: All, Directory, LDAP, MDM, Password Manager, RADIUS, SSO, Software, and Devices.&nbsp;<\/li>\n\n\n\n<li><strong>Result<\/strong>: The result of the logged activity, such as, &#8220;Device login successful&#8221; or &#8220;Policy created.&#8221;<\/li>\n\n\n\n<li><strong>Initiated By<\/strong>: Who initiated the event; the username of the JumpCloud user that initiated the event. If no username is available, the user&#8217;s email address is shown. If neither a username nor an email address is available, &#8220;&#8211;&#8221; is shown.<\/li>\n\n\n\n<li><strong>Client IP<\/strong>: Where the event happened; the IP address of the requesting client.<\/li>\n<\/ul>\n\n\n\n<p><strong>To add or change the columns: <\/strong><\/p>\n\n\n\n<ol>\n<li>From the JumpCloud Admin Portal, go to <strong>Insights<\/strong> &gt; <strong>Directory<\/strong>. <\/li>\n\n\n\n<li>On the <strong>Events<\/strong> list, click the <strong>columns<\/strong> menu. You can either search, or select from the list of Available events. You can select up to eight columns to display. You can always click <strong>Revert to default columns<\/strong> if needed. <\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-refining-data\">Refining Data<\/h2>\n\n\n\n<p>Use the service, event type, and user filters to refine log data. You can view data for the following services:<\/p>\n\n\n\n<ul>\n<li>All<\/li>\n\n\n\n<li>Directory<\/li>\n\n\n\n<li>LDAP<\/li>\n\n\n\n<li>RADIUS<\/li>\n\n\n\n<li>Password Manager<\/li>\n\n\n\n<li>SSO<\/li>\n\n\n\n<li>Software<\/li>\n\n\n\n<li>Systems<\/li>\n\n\n\n<li>MDM<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"\/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>You can view data for one or more different event types. You can also view data for either all or specific users.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p>Use the&nbsp;<strong>Time Range<\/strong> to filter data from 15 minutes to 90 days ago. &nbsp;<\/p>\n\n\n\n<p><strong>To select a time range<\/strong>:<\/p>\n\n\n\n<ol>\n<li>From the JumpCloud Admin Portal, go to <strong>Insights<\/strong> &gt; <strong>Directory<\/strong>. <\/li>\n\n\n\n<li>Click the Time Range and select from the easy Quick Picks, or define a range with the&nbsp;<strong>Specific Dates<\/strong>&nbsp;fields.<\/li>\n\n\n\n<li>Click&nbsp;<strong>apply<\/strong>.<\/li>\n\n\n\n<li>Click <strong>clear all<\/strong> to go back to default settings.  <\/li>\n<\/ol>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>To add a filter:<\/strong><\/p>\n\n\n\n<ol>\n<li>From the JumpCloud Admin Portal, go to <strong>Insights<\/strong> &gt; <strong>Directory<\/strong>. <\/li>\n\n\n\n<li>Next to the Search bar, there are four filter menus you can apply; Service, Event Type, User and Device. <\/li>\n\n\n\n<li>Click <strong>add filter<\/strong> to select a different filter to apply. You can filter by the following field names listed in <a href=\"https:\/\/jumpcloud.com\/support\/directory-insights-activity-log-filters\" target=\"_blank\" rel=\"noreferrer noopener\">DI Activity Log Filters<\/a>.<\/li>\n\n\n\n<li>Click the ( X ) next to the filter, or <strong>clear all<\/strong> to go back to the default settings. <\/li>\n\n\n\n<li>If you want to see all of the same event types in the Activity Log list, under the columns <strong>Event Type<\/strong> and <strong>Client IP<\/strong>, you can click any event type or client IP to filter only that type. \n<ul>\n<li>For example: Click <strong>admin_login_attempt<\/strong> to see all login attempts.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Click <strong>clear all<\/strong> to go back to default settings.  <\/li>\n<\/ol>\n\n\n\n<p>View current data by clicking&nbsp;<strong>refresh<\/strong>&nbsp;in the top right corner of the Activity Log.<\/p>\n\n\n\n<p>View summary details and JSON by clicking the down arrow to the left of an event date.<\/p>\n\n\n\n<p>Export event data in JSON or CSV by clicking&nbsp;<strong>export<\/strong>&nbsp;in the right corner.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Activity Log Views<\/h2>\n\n\n\n<p>Use the&nbsp;<strong>Views<\/strong>&nbsp;list to see pre-filtered Quick Views or to create and save custom views.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Activity Log Data Availability&nbsp;<\/h2>\n\n\n\n<ul>\n<li>The Activity Log can show data for up to the last 90 days.<\/li>\n\n\n\n<li>Keep in mind that your org may not have data available for the previous 90 days.<\/li>\n\n\n\n<li>Free accounts can see data for the last 15 days.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"using\">Using Saved &amp; Quick Views<\/h3>\n\n\n\n<p><strong>Considerations<\/strong>:<\/p>\n\n\n\n<ul>\n<li>If you choose a&nbsp;<em>specific date<\/em>&nbsp;for a view and then save it, the view defaults to the previous hour of data the next time you load the Saved View. Choose a different&nbsp;<strong>Quick Picks<\/strong>&nbsp;time range to view data for a longer time period.<\/li>\n\n\n\n<li>If you choose a&nbsp;<strong>Quick Pick<\/strong>&nbsp;time range for a view and then save it, data for the Quick Pick time range you saved is shown each time you load the Saved View.&nbsp;<\/li>\n\n\n\n<li>Saved Views are available to all administrator accounts on a JumpCloud org. All administrators can view, modify, and delete any Saved Views.<\/li>\n\n\n\n<li>There is a maximum of 1,000 saved views per organization.<br><img decoding=\"async\" width=\"1110\" height=\"950\" class=\"wp-image-83027\" style=\"width: 350px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/di-views-selection.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/di-views-selection.png 1110w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/di-views-selection-300x257.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/di-views-selection-1024x876.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/di-views-selection-768x657.png 768w\" sizes=\"(max-width: 1110px) 100vw, 1110px\" \/><\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"saving\">Creating and Saving Views<\/h3>\n\n\n\n<p><strong>To create a saved view<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Apply columns and&nbsp;filters for the data you want to see.&nbsp;<\/li>\n\n\n\n<li>Apply a&nbsp;<strong>Quick Picks<\/strong>&nbsp;time range.<\/li>\n\n\n\n<li>To the right of the&nbsp;<strong>Views<\/strong>&nbsp;list, click<strong>&nbsp;save view<\/strong>.<\/li>\n\n\n\n<li>Give the view a unique name.<\/li>\n\n\n\n<li>Click&nbsp;<strong>save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<p><strong>To create a saved view from a quick view<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Select&nbsp;<strong>Quick View<\/strong>&nbsp;from the&nbsp;<strong>View<\/strong>&nbsp;list.<\/li>\n\n\n\n<li>Modify the Quick View.&nbsp;<\/li>\n\n\n\n<li>Click&nbsp;<strong>save as<\/strong>.<\/li>\n\n\n\n<li>Give the view a unique name.<\/li>\n\n\n\n<li>Click&nbsp;<strong>save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"modifying\">Modifying Saved Views<\/h3>\n\n\n\n<p><strong>Considerations:<\/strong><\/p>\n\n\n\n<ul>\n<li>When you modify a saved view, it\u2019s updated for all admins in your org.<\/li>\n\n\n\n<li>Currently you can&#8217;t rename a Saved View. If you need to rename a view, you can&nbsp;delete&nbsp;a view, then create&nbsp;a new one with the name you want.<\/li>\n<\/ul>\n\n\n\n<p><strong>To modify an existing saved view<\/strong>:<\/p>\n\n\n\n<ol>\n<li>In the&nbsp;<strong>Views<\/strong>&nbsp;list, click&nbsp;<strong>select view &#8230;<\/strong>&nbsp;.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Saved View<\/strong>.<\/li>\n\n\n\n<li>Modify the filters applied to the view by adding new or removing existing columns and filters.<\/li>\n\n\n\n<li>Click&nbsp;<strong>save view<\/strong>.&nbsp;<\/li>\n\n\n\n<li>Confirm you want to save over the existing view<\/li>\n<\/ol>\n\n\n\n<p><strong>To create a new saved view from an existing saved view<\/strong>:<\/p>\n\n\n\n<ol>\n<li>In the&nbsp;<strong>Views<\/strong>&nbsp;list, click&nbsp;<strong>select view &#8230;<\/strong>&nbsp;.<\/li>\n\n\n\n<li>Select a saved view.<\/li>\n\n\n\n<li>Modify the filters applied to the view by adding new or removing existing columns and filters.<\/li>\n\n\n\n<li>Click&nbsp;<strong>save as<\/strong>.&nbsp;<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"deleting\">Deleting Saved Views<\/h3>\n\n\n\n<p><strong>Considerations:<\/strong><\/p>\n\n\n\n<ul>\n<li>When you delete a saved view, it\u2019s deleted for all Admins in your org.<\/li>\n\n\n\n<li>You can\u2019t undo a delete action.<\/li>\n<\/ul>\n\n\n\n<p><strong>To delete a saved view<\/strong>:<\/p>\n\n\n\n<ol>\n<li>In the&nbsp;<strong>Views<\/strong>&nbsp;list, click&nbsp;<strong>select view &#8230;<\/strong>&nbsp;.<\/li>\n\n\n\n<li>Hover over a saved view, then click the trash can icon to the right of the view name.<\/li>\n\n\n\n<li>To confirm that you want to delete the view, click&nbsp;<strong>delete<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"quick\">Using Quick Views<\/h3>\n\n\n\n<p>Quick Views are&nbsp;shortcuts to pre-filtered views.&nbsp;<\/p>\n\n\n\n<p>If you select a Quick View that has no data for the time period you&#8217;ve chosen, you can increase your time range&nbsp;to see data for the view.<\/p>\n\n\n\n<p><strong>To choose a Quick View<\/strong>:<\/p>\n\n\n\n<ol>\n<li>In the&nbsp;<strong>Views<\/strong>&nbsp;list, click&nbsp;<strong>select view &#8230;<\/strong>&nbsp;.<\/li>\n\n\n\n<li>&nbsp;Select a view from the list of available&nbsp;<strong>Quick Views<\/strong>.&nbsp;<\/li>\n\n\n\n<li>(Optional) Click&nbsp;<strong>clear<\/strong>&nbsp;<strong>view<\/strong>&nbsp;to remove the view from the Activity Log.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"search\">Using Search<\/h3>\n\n\n\n<p><strong>Considerations<\/strong>:&nbsp;<\/p>\n\n\n\n<ul>\n<li>When exporting Directory Insights data, any search terms in use to filter the list view will not be applied to&nbsp;the export.<\/li>\n<\/ul>\n\n\n\n<p>The DI Search is a full text query that enables you to narrow the table view of individual events in the activity log based on the terms entered.<\/p>\n\n\n\n<ul>\n<li>Spaces are treated as AND<\/li>\n\n\n\n<li>Underscores are treated as AND<\/li>\n\n\n\n<li>OR, NOT operators are not supported<\/li>\n\n\n\n<li>Exact phrase search with quotations is not supported<\/li>\n<\/ul>\n\n\n\n<p>Search works in conjunction with applied&nbsp;<strong>Saved Views<\/strong>,&nbsp;<strong>Time Range<\/strong>, and filters to search within those results for something more specific. You can also apply&nbsp;<strong>Saved Views<\/strong>,&nbsp;<strong>Time Range<\/strong>, and filters after performing a text search to further narrow results.<\/p>\n\n\n\n<p>See the table below to see which database fields are searched for each <strong>Service<\/strong> selected from the <strong>Service<\/strong> drop-down menu.<\/p>\n\n\n\n<div class=\"wp-block-wpdatatables-wpdatatables-gutenberg-block\">\n    <h3 class=\"wpdt-c\"\n        id=\"wdt-table-title-52\">DI Search<\/h3>\n<div class=\"wpdt-c row wpDataTableContainerSimpleTable wpDataTables wpDataTablesWrapper\n\"\n    >\n        <table id=\"wpdtSimpleTable-52\"\n           style=\"border-collapse:collapse;\n                   border-spacing:1px;\"\n           class=\"wpdtSimpleTable wpDataTable\"\n           data-column=\"2\"\n           data-rows=\"9\"\n           data-wpID=\"52\"\n           data-responsive=\"0\"\n           data-has-header=\"1\">\n\n                    <thead>        <tr class=\"wpdt-cell-row \" >\n                            <th class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"A1\"\n                data-col-index=\"0\"\n                data-row-index=\"0\"\n                style=\" width:50%;                padding:10px;\n                \"\n                >\n                                Service                <\/th>\n                                            <th class=\"wpdt-cell \"\n                                    data-cell-id=\"B1\"\n                data-col-index=\"1\"\n                data-row-index=\"0\"\n                style=\" width:50%;                padding:10px;\n                \"\n                >\n                                Database Fields Searched                <\/th>\n                                        <\/tr>\n                    <tbody>        <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"A2\"\n                data-col-index=\"0\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Directory                <\/td>\n                                            <td class=\"wpdt-cell \"\n                                    data-cell-id=\"B2\"\n                data-col-index=\"1\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                <div data-type-content=\"wpdt-html-content\"><ul>\n<li>id<\/li>\n<li>correlation.id<\/li>\n<li>correlation.type&nbsp;<\/li>\n<li>event_type<\/li>\n<li>resource.type<\/li>\n<li>resource.id<\/li>\n<li>resource.username<\/li>\n<li>resource.recipient_email<\/li>\n<li>resource.email_type&nbsp;<\/li>\n<li>resource.name&nbsp;&nbsp;<\/li>\n<li>system_group.type&nbsp;&nbsp;<\/li>\n<li>system_group.object_id&nbsp;<\/li>\n<li>system_group.name&nbsp;<\/li>\n<li>initiated_by.id&nbsp;<\/li>\n<li>initiated_by.type&nbsp;<\/li>\n<li>initiated_by.email&nbsp;&nbsp;<\/li>\n<li>initiated_by.source&nbsp;&nbsp;<\/li>\n<li>initiated_by.username&nbsp;<\/li>\n<li>association.type&nbsp;&nbsp;<\/li>\n<li>client_ip&nbsp;&nbsp;<\/li>\n<li>geoip.timezone&nbsp;&nbsp;<\/li>\n<li>geoip.continent_code&nbsp;&nbsp;<\/li>\n<li>geoip.region_code&nbsp;<\/li>\n<li>geoip.country_code&nbsp;&nbsp;<\/li>\n<li>geoip.region_name&nbsp;&nbsp;<\/li>\n<li>application.id&nbsp;&nbsp;<\/li>\n<li>application.name<\/li>\n<\/ul><\/div>                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"A3\"\n                data-col-index=\"0\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                LDAP                <\/td>\n                                            <td class=\"wpdt-cell \"\n                                    data-cell-id=\"B3\"\n                data-col-index=\"1\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                <div data-type-content=\"wpdt-html-content\"><ul>\n<li>id&nbsp;<\/li>\n<li>event_type&nbsp;<\/li>\n<li>initiated_by.id<\/li>\n<li>Initiated_by.type<\/li>\n<li>Initiated_by.username<\/li>\n<li>auth_method<\/li>\n<li>username<\/li>\n<\/ul><\/div>                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"A4\"\n                data-col-index=\"0\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                RADIUS                <\/td>\n                                            <td class=\"wpdt-cell \"\n                                    data-cell-id=\"B4\"\n                data-col-index=\"1\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                <div data-type-content=\"wpdt-html-content\"><ul>\n<li>id&nbsp;<\/li>\n<li>event_type&nbsp;<\/li>\n<li>initiated_by.type&nbsp;<\/li>\n<li>initiated_by.username&nbsp;<\/li>\n<li>client_ip&nbsp;<\/li>\n<li>geoip.timezone&nbsp;<\/li>\n<li>geoip.continent_code&nbsp;<\/li>\n<li>geoip.region_code<\/li>\n<li>geoip.country_code&nbsp;<\/li>\n<li>geoip.region_name&nbsp;<\/li>\n<li>auth_type&nbsp;<\/li>\n<li>username<\/li>\n<\/ul><\/div>                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"A5\"\n                data-col-index=\"0\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Password Manager                <\/td>\n                                            <td class=\"wpdt-cell \"\n                                    data-cell-id=\"B5\"\n                data-col-index=\"1\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                <div data-type-content=\"wpdt-html-content\"><ul>\n<li>id<\/li>\n<li>correlation.id<\/li>\n<li>correlation.type&nbsp;<\/li>\n<li>event_type<\/li>\n<li>resource.type<\/li>\n<li>resource.id<\/li>\n<li>resource.username<\/li>\n<li>resource.recipient_email<\/li>\n<li>resource.email_type&nbsp;<\/li>\n<li>resource.name&nbsp;&nbsp;<\/li>\n<li>system_group.type&nbsp;&nbsp;<\/li>\n<li>system_group.object_id&nbsp;<\/li>\n<li>system_group.name&nbsp;<\/li>\n<li>initiated_by.id&nbsp;<\/li>\n<li>initiated_by.type&nbsp;<\/li>\n<li>initiated_by.email&nbsp;&nbsp;<\/li>\n<li>initiated_by.source&nbsp;&nbsp;<\/li>\n<li>initiated_by.username&nbsp;<\/li>\n<li>association.type&nbsp;&nbsp;<\/li>\n<li>client_ip&nbsp;&nbsp;<\/li>\n<li>geoip.timezone&nbsp;&nbsp;<\/li>\n<li>geoip.continent_code&nbsp;&nbsp;<\/li>\n<li>geoip.region_code&nbsp;<\/li>\n<li>geoip.country_code&nbsp;&nbsp;<\/li>\n<li>geoip.region_name&nbsp;&nbsp;<\/li>\n<li>application.id&nbsp;&nbsp;<\/li>\n<li>application.name<\/li>\n<li>application.displayName<\/li>\n<\/ul><\/div>                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"A6\"\n                data-col-index=\"0\"\n                data-row-index=\"5\"\n                style=\"                padding:10px;\n                \"\n                >\n                                SSO                <\/td>\n                                            <td class=\"wpdt-cell \"\n                                    data-cell-id=\"B6\"\n                data-col-index=\"1\"\n                data-row-index=\"5\"\n                style=\"                padding:10px;\n                \"\n                >\n                                <div data-type-content=\"wpdt-html-content\"><ul>\n<li>id&nbsp;<\/li>\n<li>event_type&nbsp;<\/li>\n<li>initiated_by.id&nbsp;<\/li>\n<li>initiated_by.type&nbsp;<\/li>\n<li>initiated_by.username&nbsp;<\/li>\n<li>client_ip&nbsp;<\/li>\n<li>geoip.timezone&nbsp;<\/li>\n<li>geoip.continent_code&nbsp;<\/li>\n<li>geoip.region_code<\/li>\n<li>geoip.country_code&nbsp;<\/li>\n<li>geoip.region_name&nbsp;<\/li>\n<li>application.id&nbsp;<\/li>\n<li>application.name&nbsp;<\/li>\n<\/ul><\/div>                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"A7\"\n                data-col-index=\"0\"\n                data-row-index=\"6\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Software                <\/td>\n                                            <td class=\"wpdt-cell \"\n                                    data-cell-id=\"B7\"\n                data-col-index=\"1\"\n                data-row-index=\"6\"\n                style=\"                padding:10px;\n                \"\n                >\n                                <div data-type-content=\"wpdt-html-content\"><ul>\n<li>id&nbsp;<\/li>\n<li>event_type&nbsp;<\/li>\n<li>resource.type&nbsp;<\/li>\n<li>resource.id&nbsp;<\/li>\n<li>initiated_by.id&nbsp;<\/li>\n<li>initiated_by.type<\/li>\n<li>client_ip&nbsp;<\/li>\n<li>geoip.timezone&nbsp;<\/li>\n<li>geoip.continent_code&nbsp;&nbsp;<\/li>\n<li>geoip.region_code<\/li>\n<li>geoip.country_code&nbsp;<\/li>\n<li>geoip.region_name&nbsp;<\/li>\n<li>system.id&nbsp;<\/li>\n<li>system.hostname&nbsp;<\/li>\n<li>application.name&nbsp;<\/li>\n<li>application.version&nbsp;<\/li>\n<li>application.publisher<\/li>\n<\/ul><\/div>                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"A8\"\n                data-col-index=\"0\"\n                data-row-index=\"7\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Systems                <\/td>\n                                            <td class=\"wpdt-cell \"\n                                    data-cell-id=\"B8\"\n                data-col-index=\"1\"\n                data-row-index=\"7\"\n                style=\"                padding:10px;\n                \"\n                >\n                                <div data-type-content=\"wpdt-html-content\"><ul>\n<li>id&nbsp;<\/li>\n<li>correlation.id&nbsp;<\/li>\n<li>correlation.type&nbsp;<\/li>\n<li>event_type&nbsp;<\/li>\n<li>resource.type&nbsp;<\/li>\n<li>resource.id&nbsp;<\/li>\n<li>resource.username&nbsp;<\/li>\n<li>resource.email<\/li>\n<li>resource.name&nbsp;<\/li>\n<li>initiated_by.id&nbsp;<\/li>\n<li>initiated_by.type&nbsp;<\/li>\n<li>initiated_by.email&nbsp;<\/li>\n<li>client_ip&nbsp;<\/li>\n<li>geoip.timezone&nbsp;<\/li>\n<li>geoip.continent_code&nbsp;<\/li>\n<li>geoip.region_code&nbsp;<\/li>\n<li>geoip.country_code&nbsp;<\/li>\n<li>geoip.region_name&nbsp;<\/li>\n<li>system.id&nbsp;<\/li>\n<li>system.hostname&nbsp;<\/li>\n<li>system.displayname&nbsp;<\/li>\n<li>system.osFamily<\/li>\n<\/ul><\/div>                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left\"\n                                    data-cell-id=\"A9\"\n                data-col-index=\"0\"\n                data-row-index=\"8\"\n                style=\"                padding:10px;\n                \"\n                >\n                                MDM                <\/td>\n                                            <td class=\"wpdt-cell \"\n                                    data-cell-id=\"B9\"\n                data-col-index=\"1\"\n                data-row-index=\"8\"\n                style=\"                padding:10px;\n                \"\n                >\n                                <div data-type-content=\"wpdt-html-content\"><ul>\n<li>id&nbsp;<\/li>\n<li>event_type<\/li>\n<li>mdm_device_id<\/li>\n<li>request_type<\/li>\n<\/ul><\/div>                <\/td>\n                                        <\/tr>\n                    <\/table>\n<\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"view-old-api-keys-actively-being-used\">View Old API Keys Actively Being Used<\/h2>\n\n\n\n<p>The Directory Insights event \u2018admin_old_api_key_attempt\u2019 can be used to identify any old admin API key that\u2019s still being used. When an admin API key is rotated, you\u2019ll see these events until you replace all instances of your old admin API key with the newly rotated key value. Each attempted usage of an old admin API key will generate a new instance of this event detailing the extent of its usage.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"to-view-old-api-keys:\"><strong>To view old API Keys:<\/strong><\/h3>\n\n\n\n<ol>\n<li>Log in to the&nbsp;<a href=\"https:\/\/console.jumpcloud.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>In the left hand navigation, click&nbsp;<strong>INSIGHTS<\/strong>&nbsp;&gt;&nbsp;<strong>Directory<\/strong>.<\/li>\n\n\n\n<li>Select a&nbsp;<strong>Time Range<\/strong>.&nbsp; Only events within that&nbsp;<strong>Time Range<\/strong>&nbsp;will be displayed.<\/li>\n\n\n\n<li>In the&nbsp;<strong>Event Type<\/strong>&nbsp;dropdown menu, select&nbsp;<strong>admin_old_api_key_attempt<\/strong>&nbsp;to filter the events.<\/li>\n\n\n\n<li>A list of results will populate if there are any old API keys being actively used for the selected&nbsp;<strong>Time Range<\/strong>.\n<ul>\n<li>You can also pinpoint usage by searching your code base for the specific JumpCloud API Path value \u2018console.jumpcloud.com\u2019 endpoint or for the following \u2018api.jumpcloud.com\u2019 path snippets:\n<ul>\n<li>\u2018\/insights\/directory\/v1\u2019<\/li>\n\n\n\n<li>\u2018\/reports\u2019<\/li>\n\n\n\n<li>\u2018\/import\/users\u2019<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Click the dropdown arrow next to the timestamp of an event to see a&nbsp;<strong>Summary<\/strong>.<\/li>\n\n\n\n<li>Click the&nbsp;<strong>JSON<\/strong>&nbsp;tab to see the event details to identify the source of where the old API key is being used. The following details are provided:\n<ul>\n<li><strong>initiated_by<\/strong>:&nbsp;Identifies the admin who\u2019s API key is being used.<\/li>\n\n\n\n<li><strong>client_ip<\/strong>: The IP Address from which the API call was sourced to JumpCloud.<\/li>\n\n\n\n<li><strong>geoip<\/strong>: Identifies the geography associated with the client IP address.<\/li>\n\n\n\n<li><strong>Resource<\/strong>:&nbsp; Identifies the base URL for the JumpCloud API being called.\n<ul>\n<li>A URL of `<a href=\"https:\/\/console.jumpcloud.com\/\">console.jumpcloud.com<\/a>` will also have a&nbsp;<strong>Path<\/strong>&nbsp;value, which specifies the API endpoint being called.<\/li>\n\n\n\n<li>A URL of `api.jumpcloud.com` will be any endpoint in the\u00a0<a href=\"https:\/\/jumpcloud.com\/support\/directory-insights-api\">Directory Insights API<\/a>\u00a0or\u00a0<a href=\"https:\/\/jumpcloud.com\/support\/integrate-with-the-jumpcloud-scim-server\">SCIM Server API<\/a>.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>useragent<\/strong>: Standard information about the program making the api call.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Now, your old API key might be coming from various integrations with JumpCloud. You will have to generate a new API key and update any existing integrations that use an API key with the newly generated value. See which integrations use an API key, and generate a new one, see <a href=\"https:\/\/jumpcloud.com\/support\/jumpcloud-apis\">JumpCloud APIs<\/a> to learn more.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>The&nbsp;Directory Insights&nbsp;Activity Log includes an event frequency chart and a table with individual events for the selected time range. Directory [&hellip;]<\/p>\n","protected":false},"author":206,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2912,2853],"support_tag":[],"coauthors":[2842],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>View the Directory Insights Data Activity Log - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to view the data activity log in Directory Insights.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"View the Directory Insights Data Activity Log\" \/>\n<meta property=\"og:description\" content=\"Learn how to view the data activity log in Directory Insights.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-08-01T15:22:44+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/di-views-selection.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"9 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"pamkellman\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log\",\"url\":\"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log\",\"name\":\"View the Directory Insights Data Activity Log - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/di-views-selection.png\",\"datePublished\":\"2023-06-05T17:11:46+00:00\",\"dateModified\":\"2024-08-01T15:22:44+00:00\",\"description\":\"Learn how to view the data activity log in Directory Insights.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/di-views-selection.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/di-views-selection.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"View the Directory Insights Data Activity Log\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"View the Directory Insights Data Activity Log - JumpCloud","description":"Learn how to view the data activity log in Directory Insights.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log","og_locale":"en_US","og_type":"article","og_title":"View the Directory Insights Data Activity Log","og_description":"Learn how to view the data activity log in Directory Insights.","og_url":"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log","og_site_name":"JumpCloud","article_modified_time":"2024-08-01T15:22:44+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/di-views-selection.png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"9 minutes","Written by":"pamkellman"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log","url":"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log","name":"View the Directory Insights Data Activity Log - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/di-views-selection.png","datePublished":"2023-06-05T17:11:46+00:00","dateModified":"2024-08-01T15:22:44+00:00","description":"Learn how to view the data activity log in Directory Insights.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log#primaryimage","url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/di-views-selection.png","contentUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/di-views-selection.png"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/view-the-directory-insights-data-activity-log#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"View the Directory Insights Data Activity Log"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76630"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/206"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76630\/revisions"}],"predecessor-version":[{"id":113525,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76630\/revisions\/113525"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=76630"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=76630"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=76630"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=76630"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}