5.1 Basic Event Logs
AnySecura records various operation logs of client machines, including: user login and logout logs, application logs, website browsing logs, document operation logs, shared document logs, document printing logs, removable storage operation logs, and asset change logs. These detailed logs allow administrators to view nearly all activities performed by users on their machines.
In all log views, the following operations are available:
| Operation |
Description |
| Description |
Each log view can be printed or previewed for record-keeping. |
| Export Logs |
Export various logs as needed. |
| Delete Logs |
In the data view, right-click and select "Delete." Administrators can choose the deletion mode: delete selected records, delete current page records, or delete all records matching the criteria. |
| View Screen History |
While reviewing log records, administrators can view the screen history of a specific log entry. Select a log entry, right-click, and choose "View Screen History" to automatically open the screen history viewer and quickly locate the screen content at the time of the log action. Clients without screen history recording enabled cannot provide screen history. |
| Screen History Tracking |
While reviewing logs, right-click and select "Screen History Tracking" to open the screen history tracking window. Clicking on any log or navigating through the log properties pages will automatically switch the screen history display in the tracking window. Clients without screen history recording enabled cannot perform screen history tracking. |
Select the menu "Logs → Basic Events" to view basic event logs. Basic event logs record client system startup/shutdown, user login/logout, dial-up connections, patch management, and software distribution-related events.
The types of logged operations include the following:
| Operation Type |
Description |
| System Startup/Shutdown |
Refers to the client system. The startup/shutdown of the client corresponds roughly to the operating system startup/shutdown. |
| User Login |
Logs each user login to the client machine. |
| User Logout |
Logs each user logout from the client machine. |
| Session Connection |
Logs when a remote desktop session connects to the client machine. |
| Session Disconnection |
Logs when a remote desktop session is disconnected from the client machine. |
| Activity Start |
Records an activity log when the client machine registers the first keyboard or mouse activity after a period of inactivity. The timestamp is the current time. |
| Activity Stop |
Records a stop activity log if no keyboard or mouse activity has occurred for over two hours. The timestamp reflects the last recorded activity time. |
| Dial-Up |
Records dial-up and hang-up events when the user establishes a dial-up connection. |
| Patch Management |
Logs all patch installations automatically performed by the client for administrative patch deployment, allowing tracking of patch installation status. |
| Software Distribution |
Logs execution of software distribution tasks on target machines, facilitating tracking of distribution progress. |
| Client Installation |
Logs client installation events. Fresh installations record the newly installed client version, while overwrites log both previous and current versions. |
| Client Uninstallation |
Logs client uninstallation events. Uninstalling via the console records the client version prior to removal. |
| Client Upgrade |
Logs automatic client upgrades, including version changes. |
| Software Uninstallation |
Logs when the client executes software uninstallation tasks. |
| Vulnerability Scan |
Logs generated when the client performs vulnerability checks. |
| Server Connection |
Logs when the client connects to the server or relay server. |
| Server Disconnection |
Logs when the client disconnects from the server or relay server. |
| Server Switch |
Logs when the client switches connection to a different server or relay server. |
Basic Event Logs contain the following information: operation type, time, computer, user, description, etc. The operation type indicates the type of logged event, such as system startup or user login, while the description provides detailed information about the event.
By default, basic event logs display all entries. Administrators can also set various query conditions for selective and targeted searches.
| Query Condition |
Description |
| Time and Range |
General query condition. |
| Type |
Refers to the operation type of the basic event logs. The default is "All," but administrators can specify one or multiple types from the dropdown for querying—for example, to check users who logged into the client machine or patch installation events. |
| Description |
Queries based on the log's description. This is an input field that supports wildcards and fuzzy searches. |
Don't see what you're looking for?
