Activity Logs
Activity logs show how users access your application. Use them to investigate failed logins, review new devices and IP addresses, and check file downloads. Authgate records these events automatically.
Viewing Activity
- Select your application in the dashboard.
- Open Activity log to see activity across its users, newest first.
- Click Details on an entry to see more information.
Search by username or license code, or filter by activity type, date, and exact IP address. On the Failed logins tab, you can also filter by failure reason. Dates and times use the timezone configured in Settings.
To review one user, open Users and select them. Their Activity timeline shows their events. Expand an entry with the arrow to view its details.
To see which sessions are still active after a login, open Sessions in the dashboard. See Managing Active Sessions for details.
Recorded Events
Each entry includes the time and IP address, plus details specific to the event:
| Event | Details |
|---|---|
| Successful login | Authentication method and session ID |
| Failed login | Authentication method and failure reason |
| Device registered | Device ID and hardware ID |
| New IP address | An IP address seen for this user for the first time |
| File downloaded | File ID and filename |
Failed login reasons include invalid credentials, device restrictions, too many simultaneous sessions, inactive membership, bans, and timeouts. Attempts with an unknown username or license code are not recorded because they cannot be linked to a user.
File downloads are recorded when an authenticated user requests a file through your application. Anonymous downloads and downloads from the dashboard are not included.
Retention
Authgate keeps activity for 90 days by default. Older entries are deleted automatically once a day at 03:00 UTC and cannot be restored.
To change how long activity is kept, set the ACTIVITY_LOG_RETENTION_DAYS environment variable. Use 0 to keep activity forever.