View and filter the audit events in BlackBerry Enterprise Identity
If you have
BlackBerry UEM Cloud
, UEM Cloud
keeps user and audit events in log files that you can use to investigate any administrator and user actions (for example, user log in failure and authentication success) for the enterprise. UEM Cloud
records all actions that users perform in the management console. You can filter the list of actions to display only the actions that are relevant to your investigation. For further analysis or reporting purposes, you can export the filtered list to a .csv file.
Security audit events include user actions such as authentication, modify data that is associated with a user, and creating a new user account. To view the audit logs, complete the following:
- In theUEM Cloudmanagement console, on the menu bar, clickApps.
- ClickAdd an app.
- ClickEnterprise Identity.
- ClickOpen Enterprise Identity console.
- On theUser Logspage, all of the user events have been logs are displayed. You can enter a search term to filter the events that are displayed.
- On theUser Logspage, all of the user events are displayed by default. Optionally, enter a search term to only display the logged events for the search criteria.
To export all security audit events from the last 30 days to a .csv file, in the Enterprise Identity console, click
Export last 30 days to CSV
.