Event Logs

Event Logs

This KB article describes the information listed on this page and how to manage them.

The LOGS & REPORTS > Event Log page lists the event logs. 

By default, the following information is listed on the page

Time – The time of the event in YYYY:MM:DD HH:MM:SS 

Username – The username of the user.

Log – The details of the event 

View Event Logs

  • The drop-down at the top of the page has options to view the events by Today, Week, Month, and Date Range


  • Click the Search events drop-down to select the events you want to view.  More than one event can be added in the field. 


The following 121 events can be viewed. 

Gateway Logout
Gateway Login
User Accessed Authorized Application
User Accessed Unauthorised Application
User Login Failure
User Portal Login Failure
User Login OTP Failure
User Device Bind Failed
User Device Check Failed
User Windows Offline Login
User Windows Invalid Credentials
Device Suspended
User Agent Login
User Agent Logout
User Agent Login Failure
Device Activated
User Installed Agent Successfully
AD User
AD User Group
User Agent Configuration Update
Gateway Agent Configuration Update
User Device Check Authorized
Device Approved
User Login using Authorized Device
User Login via OTP Success
User Agent Login Attempt
Device Pending Approval
Company Added
New Admin added
New Subscription added
ISC server edited
ISC server added
updated controller
updated gateway
started controller
restarted controller
User Portal Login
User Portal Logout
deleted controller(s)
deleted gateway
updated gateway
deleted active directory
added ldap
updated ldap
deleted ldap
added radius
updated radius
updated company details
updated company banner
updated business contact
updated tech contact
updated renewal contact
updated dns-wns details
changed password
added new user
deleted a company user
searched in group
added group
updated group
deleted group
added device check
deleted device check
added ACL
updated ACL details
deleted ACL
updated application group
deleted application group
added application service
deleted application service
added application group
added active directory
added controller
updated active directory
added gateway
stopped controller
commited controller
User Edit
Device Check Edit
Device Delete
Google Delete
Google Edit
Google Add
SubAdmin Role Add
SubAdmin Role Edit
SubAdmin Role Delete
SubAdmin Add
SubAdmin Delete
SubAdmin Disable
SubAdmin Enable
Report Subscription Add
Report Subscription Update
Report Subscription Delete
Device Add
Device Edit
Active Directory Sync Success
Active Directory Sync Failure
LDAP Sync Success
LDAP Sync Failure
Gateway downloaded
User downloaded
User Password Reset
User Password Changed
User viewed QR code
User Profile Updated
User Account confirmed
deleted radius
User Settings Updated
User Suspended
User Activated
Export Log Added
Export Log Updated
Export Log Deleted
Local Password Policy Updated
updated application service
User force disconnected
Gateway force disconnected
User Device Registered
user geo binding failure
User Windows MFA Success
User Windows MFA Failure
User Windows MFA Bypass



Download Session Log List 

ISA web portal administrators can download the event logs by Today, Week, Month, or Date Range by clicking the CSV button at the top of the page. After setting the date, select the events from the drop-down list. An email with the link to download the file in CSV format is sent to the logged-in administrator’s email address. 

  1. Select the drop-down to select the date. 

  2. Click the Search events drop-down and select the events. 

  3. Click the CSV button.


  1. A message that an email is scheduled to be sent to the administrator’s email address is displayed. 


  1. Click Download File within the email.

  1. View the file in a spreadsheet application.


Navigating the Event Logs page

The Event Log page allows easy pagination for viewing a large number of events. You can view the list by using the navigation control bar at the top right of the page. 

Click the drop-down box to select the number of events to be displayed on the Event Log page. By default, it is set to display 10 entries.. You can change it to display either 30 or 50. 

Click the Next button to view the next page of events. Click the Prev button to view the previous page. 

Searching Event Logs

You can search the list by name by entering it in the search box. 


Sorting the Session Log

You can sort the list by Log. Click the up/down arrow alongside the header field. 

Conclusion
The Event Log page is useful for the ISA web portal administrators to track events.
    • Related Articles

    • Exporting Logs to a SIEM

      InstaSafe Secure Access generates various kinds of logs related to historic and current user activity, applications accessed, etc. Most common SIEM systems like QRadar, ArcSight and Splunk are supported. These logs can be easily exported to a SIEM of ...
    • ISA App Log File

      The ISA App, once successfully installed and configured, generates Connection Logs that could be extremely helpful in troubleshooting issues that may crop up. Depending on the device OS, the Log File location is as follows: Locating the ISA App Log ...
    • ISA App Logs "Server poll timeout"

      This Article highlights the steps to be taken in case the ISA App on Windows is unable to connect and the message seen in the ISA App Logs is "Server poll timeout" Issue "Server poll timeout, restarting" is a message that indicates that the OpenVPN ...
    • Logs and Reports

      InstaSafe Secure Access allows you to conveniently access comprehensive on-demand information regarding historic and current user activity as well as other records with the help of several log files and also generate extensive reports in various ...
    • ISA Release Notes June 2021

      This Article serves as the Release Notes for the ISA Windows Integrated MFA feature incorporated in the InstaSafe Secure Access (ISA) solution. Why this feature was introduced Two Factor Authentication was required with Always ON ISA connection. ...