How to filter and review activity in the User log

Filters in the User log help you quickly find relevant user events, such as logins, user changes and role updates.

Using filters

1. Go to Organization logs → User log.

2. Define the time range using Start date, Start time, End date and End time.

3. Click Filters to open the filter panel.

4. Set the parameters you need.

5. Click Apply to update the list.

Available filters

You can combine filters to narrow down the results.

• Action — Multi-select list of event types:

  • • Login succeeded

    • User added

    • User removed

    • Role change

• Action by — Free-text search on the user who performed the action (for example an email address).

• IP address — Free-text search on the IP address from which the action originated.

Filtering tips and use cases

• Security review

  • Filter Action to Login succeeded and set a time range to see all successful logins.

  • Add an IP address filter if you need to review logins from a specific location.

• Access management audit

  • Filter Action to User added, User removed and Role change to see all user management actions in the period.

  • Use Action by to see which administrator performed the changes.

• Investigating a specific user

  • Use Action by to filter on that user’s email address.

  • Combine with Action = Login succeeded to review their login history.

• Exporting filtered results

  • After applying filters, click Export to download a CSV containing only the relevant events for your audit or documentation.

By combining time range and filters, the User log allows you to quickly answer who did what, when, and from where in your Qvalia account.