\n application.name <\/td>\n | \n The application name. <\/td>\n | \n \n \n- SSO<\/li>\n<\/ul>\n<\/div> <\/td>\n <\/tr>\n
|
\n application.sso_url <\/td>\n | \n The application URL. <\/td>\n | \n \n- SSO<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n association.connection.from.type <\/td>\n | \n The association object from. <\/td>\n | \n \n- Directory<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n association.connection.to.type <\/td>\n | \n The association object to. <\/td>\n | \n \n- Directory<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n attr <\/td>\n | \n A set of attributes to be returned to the client. <\/td>\n | \n \n- LDAP<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n auth_method <\/td>\n | \n Session = console, api-key = api-key <\/td>\n | \n \n \n- Directory<\/li>\n
- LDAP<\/li>\n<\/ul>\n<\/div> <\/td>\n <\/tr>\n
|
\n auth_type <\/td>\n | \n The authentication type. <\/td>\n | \n \n- RADIUS<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n client_ip <\/td>\n | \n The IP address the request came from. <\/td>\n | \n \n \n- Directory<\/li>\n
- MDM<\/li>\n
- RADIUS<\/li>\n
- SSO<\/li>\n
- Systems<\/li>\n<\/ul>\n<\/div> <\/td>\n <\/tr>\n
|
\n correlation.id <\/td>\n | \n The correlated event ID. <\/td>\n | \n \n- Directory<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n deref <\/td>\n | \n The alias dereferencing behavior, which indicates how the server should treat any aliases it encounters while processing the search. <\/td>\n | \n \n- LDAP<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n device <\/td>\n | \n All logs associated with the selected device for the supported services. <\/td>\n | \n \n \n- Directory<\/li>\n
- Systems<\/li>\n<\/ul>\n<\/div> <\/td>\n <\/tr>\n
|
\n dn <\/td>\n | \n Distinguished name (DN) provided for authentication. <\/td>\n | \n \n- LDAP<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n eap_type <\/td>\n | \n The EAP type. <\/td>\n | \n \n- RADIUS<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n error_chain.error_code <\/td>\n | \n The mdm error code. <\/td>\n | \n \n- MDM<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n error_chain.error_domain <\/td>\n | \n The mdm error domain. <\/td>\n | \n \n- MDM<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n error_code <\/td>\n | \n The result code. <\/td>\n | \n \n- LDAP<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n error_message <\/td>\n | \n Error message in the event. <\/td>\n | \n \n- Directory<\/span><\/li>\n
- RADIUS<\/li>\n
- LDAP<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n event_type <\/td>\n | \n The event type. <\/td>\n | \n \n \n- Directory<\/li>\n
- LDAP<\/li>\n
- MDM<\/li>\n
- RADIUS<\/li>\n
- SSO<\/li>\n
- Systems<\/li>\n<\/ul>\n<\/div> <\/td>\n <\/tr>\n
|
\n filter <\/td>\n | \n The filter criteria for the search with the scope. <\/td>\n | \n \n- LDAP<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n geoip.continent_code <\/td>\n | \n The client IP continent code. <\/td>\n | \n \n- Directory<\/li>\n
- RADIUS<\/li>\n
- SSO<\/li>\n
- Systems<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n geoip.country_code <\/td>\n | \n The client IP country code. <\/td>\n | \n \n- Directory<\/li>\n
- RADIUS<\/li>\n
- SSO<\/li>\n
- Systems<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n geoip.region_code <\/td>\n | \n The client IP region code. <\/td>\n | \n \n- Directory<\/li>\n
- RADIUS<\/li>\n
- SSO<\/li>\n
- Systems<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n geoip.region_name <\/td>\n | \n The client IP region name. <\/td>\n | \n \n- Directory<\/li>\n
- RADIUS<\/li>\n
- SSO<\/li>\n
- Systems<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n geoip.timezone <\/td>\n | \n The client IP region's timezone. <\/td>\n | \n \n- Directory<\/li>\n
- RADIUS<\/li>\n
- SSO<\/li>\n
- Systems<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n id <\/td>\n | \n The event\u2019s unique id. <\/td>\n | \n \n- Directory<\/li>\n
- MDM<\/li>\n
- RADIUS<\/li>\n
- SSO<\/li>\n
- Systems<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n idp_initiated <\/td>\n | \n True if the request was initiated from the Identity Provider (JumpCloud). False if the auth was initiated from the service provider. <\/td>\n | \n \n- SSO<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n initiated_by.email <\/td>\n | \n Event initiated by email. <\/td>\n | \n \n- Directory<\/span><\/li>\n
- SSO<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n initiated_by.type <\/td>\n | \n Event initiated by type. <\/td>\n | \n \n- Directory<\/span><\/li>\n
- SSO<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n initiated_by.username <\/td>\n | \n Event initiated by username. <\/td>\n | \n \n- Directory<\/span><\/li>\n
- SSO<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n mech <\/td>\n | \n The authentication method used. Either simple or SASL Note that we don't currently support SASL. <\/td>\n | \n \n- LDAP<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n mfa <\/td>\n | \n If MFA was used on an authentication attempt. <\/td>\n | \n \n- Directory<\/li>\n
- RADIUS<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n mfa_meta.type <\/td>\n | \n The type of MFA used. <\/td>\n | \n \n- Directory<\/li>\n
- RADIUS<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n nas_mfa_state <\/td>\n | \n \n- Disabled: No MFA required<\/li>\n
- Enabled: MFA is required if the user is configured for MFA<\/li>\n
- Required: MFA is required unless the user is excluded and not configured for MFA<\/li>\n
- Always: MFA always required<\/li>\n<\/ul><\/div> <\/td>\n
| \n \n- RADIUS<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n number_of_results <\/td>\n | \n The number of rows returned from the search. <\/td>\n | \n \n- LDAP<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n operation_number <\/td>\n | \n All operation requests and operation result pairs are given incremental operation numbers beginning with operation_number=0 to identify the distinct operations being performed. <\/td>\n | \n \n- LDAP<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n outer.eap_type <\/td>\n | \n The outer EAP type. <\/td>\n | \n \n- RADIUS<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n outer.username <\/td>\n | \n The outer username. <\/td>\n | \n \n- RADIUS<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n process_name <\/td>\n | \n The process that initiated a login attempt. <\/td>\n | \n \n- Systems<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n provider <\/td>\n | \n The org id of the provider if the org is a provider org. <\/td>\n | \n \n \n- Directory<\/li>\n
- Systems<\/li>\n<\/ul>\n<\/div> <\/td>\n <\/tr>\n
|
\n request_type <\/td>\n | \n The type of command. <\/td>\n | \n \n- MDM<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n resource.email <\/td>\n | \n The resource object email. <\/td>\n | \n \n \n- Directory<\/li>\n
- Systems<\/li>\n<\/ul>\n<\/div> <\/td>\n <\/tr>\n
|
\n resource.hostname <\/td>\n | \n The resource object hostname. <\/td>\n | \n \n \n- Directory<\/li>\n
- Systems<\/li>\n<\/ul>\n<\/div> <\/td>\n <\/tr>\n
|
\n resource.hostname <\/td>\n | \n The resource object hostname. <\/td>\n | \n \n \n- Directory<\/li>\n
- Systems<\/li>\n<\/ul>\n<\/div> <\/td>\n <\/tr>\n
|
\n resource.name <\/td>\n | \n The resource object name. <\/td>\n | \n \n \n- Directory<\/li>\n
- Systems<\/li>\n<\/ul>\n<\/div> <\/td>\n <\/tr>\n
|
\n resource.type <\/td>\n | \n The resource object type. <\/td>\n | \n \n \n- Directory<\/li>\n
- Systems<\/li>\n<\/ul>\n<\/div> <\/td>\n <\/tr>\n
|
\n resource.username <\/td>\n | \n The resource object username. <\/td>\n | \n \n \n- Directory<\/li>\n
- Systems<\/li>\n<\/ul>\n<\/div> <\/td>\n <\/tr>\n
|
\n scope <\/td>\n | \n The search scope. This specifies the portion of the target subtree that should be considered. Can be: base, only return the specified entry. singleLevel (1) only the immediate children of the entry are considered. <\/td>\n | \n \n- LDAP<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n service <\/td>\n | \n Which service the event originated from. <\/td>\n | \n \n- Directory<\/li>\n
- LDAP<\/li>\n
- MDM<\/li>\n
- RADIUS<\/li>\n
- SSO<\/li>\n
- Systems<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n src_ip <\/td>\n | \n The IP address the login request came from. <\/td>\n | \n \n- Systems<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n start_tls <\/td>\n | \n The starttls protocol that was used to open the LDAP connection. <\/td>\n | \n \n- LDAP<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n status <\/td>\n | \n The command result: acknowledged, error, command format error, and idle. <\/td>\n | \n \n- MDM<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n success <\/td>\n | \n DeNotes if a login attempt was successful or not. <\/td>\n | \n \n \n- Directory<\/li>\n
- LDAP<\/li>\n
- RADIUS<\/li>\n
- Systems<\/li>\n<\/ul>\n<\/div> <\/td>\n <\/tr>\n
|
\n system.hostname <\/td>\n | \n The system hostname. <\/td>\n | \n \n- Systems<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n system.id <\/td>\n | \n System unique ID <\/td>\n | \n \n- System<\/span><\/li>\n
- Software<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n tls_established <\/td>\n | \n The LDAPS protocol was used to open the LDAP connection. <\/td>\n | \n \n- LDAP<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n username <\/td>\n | \n The username provided for the auth attempt. <\/td>\n | \n \n- LDAP<\/li>\n
- RADIUS<\/li>\n
- Systems<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n user <\/td>\n | \n All logs associated with the selected user. <\/td>\n | \n \n- Directories<\/span><\/li>\n
- LDAP<\/li>\n
- RADIUS<\/li>\n
- SSO<\/li>\n
- Systems<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n windows elevated <\/td>\n | \n If the user had elevated privileges at the time of log in. <\/td>\n | \n \n- Windows<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n
|
\n windows logon type <\/td>\n | \n | \n \n- Windows<\/li>\n<\/ul><\/div> <\/td>\n <\/tr>\n <\/table>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"
You can filter the Directory Insights Data Activity Log with the following filters.<\/p>\n","protected":false},"author":206,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2912,2853],"support_tag":[],"coauthors":[2842,3011],"acf":[],"yoast_head":"\n Directory Insights Activity Log Filters - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn about the filtering parameters available in JumpCloud Directory Insights, as well as common event types.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/directory-insights-activity-log-filters\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Directory Insights Activity Log Filters\" \/>\n<meta property=\"og:description\" content=\"Browse the JumpCloud Help Center by category, search for a specific topic, or check out our featured articles.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/directory-insights-activity-log-filters\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-09T22:23:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"pamkellman, nickconrad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/directory-insights-activity-log-filters\",\"url\":\"https:\/\/jumpcloud.com\/support\/directory-insights-activity-log-filters\",\"name\":\"Directory Insights Activity Log Filters - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:09:01+00:00\",\"dateModified\":\"2023-06-09T22:23:23+00:00\",\"description\":\"Learn about the filtering parameters available in JumpCloud Directory Insights, as well as common event types.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/directory-insights-activity-log-filters#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/directory-insights-activity-log-filters\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/directory-insights-activity-log-filters#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Directory Insights Activity Log Filters\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Directory Insights Activity Log Filters - JumpCloud","description":"Learn about the filtering parameters available in JumpCloud Directory Insights, as well as common event types.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/directory-insights-activity-log-filters","og_locale":"en_US","og_type":"article","og_title":"Directory Insights Activity Log Filters","og_description":"Browse the JumpCloud Help Center by category, search for a specific topic, or check out our featured articles.","og_url":"https:\/\/jumpcloud.com\/support\/directory-insights-activity-log-filters","og_site_name":"JumpCloud","article_modified_time":"2023-06-09T22:23:23+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Written by":"pamkellman, nickconrad"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/directory-insights-activity-log-filters","url":"https:\/\/jumpcloud.com\/support\/directory-insights-activity-log-filters","name":"Directory Insights Activity Log Filters - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:09:01+00:00","dateModified":"2023-06-09T22:23:23+00:00","description":"Learn about the filtering parameters available in JumpCloud Directory Insights, as well as common event types.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/directory-insights-activity-log-filters#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/directory-insights-activity-log-filters"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/directory-insights-activity-log-filters#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Directory Insights Activity Log Filters"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76746"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/206"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76746\/revisions"}],"predecessor-version":[{"id":90510,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76746\/revisions\/90510"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=76746"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=76746"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=76746"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=76746"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}} |