Go Up
You are here: AdministrationMonitored Object Types, Actions, and AttributesLogon Activity

Actions and Logon Types Captured When Monitoring Logon Activity

Review a full list of actions captured when monitoring Logon Activity with Netwrix Auditor.

NOTE: For the attributes marked with asterisk (*) what changed is not reported.

Action Object Type Attributes

Successful Logon

Logon

Interactive Logon

A session was reconnected.

Failed Logon

Logon*

Cause description.

The number of matching events if the logon attempt failed several times during a short period of time.

Interactive Logon

Logoff

Interactive Logon

A session was disconnected.

Session duration (if the corresponding logon was found).

Go Up