Reports: Report on Session Activity


Reports :: Access

Administrators and privileged users can generate broad, comprehensive reports and also apply specific filtering to customize reported information based on clear-cut needs.

Report Type

Generate activity reports according to three separate report types: Session, Summary, and Session Forensics (if enabled).


Apply filtering options as needed to derive more customized reports from the basic report types. Enable one or more filters as you wish, but only sessions that match all filters selected will be shown.

Session ID or Sequence Number

This unique identifier requires that you specify the ID (LSID) or sequence number for the single session you seek. This is often helpful if you have an external ticketing system or CRM integration. You cannot combine this filter with others.

Date Range

Select a start date for which to pull reporting data. Then select either the number of days for which to pull your report or an end date.


Filter sessions by computer name, public IP, or private IP.


Use the dropdown to choose the type of user participation you want to include. Choose sessions where a specific user participated or where any user within a team participated, including sessions that were never associated with the specified team.

External Key

Filter to report sessions that used the same specific external key.

Include only completed sessions

Filter to include only sessions that have been completed. This excludes sessions that are still running.

Access Session Report

View all sessions that match the criteria specified on the previous page, where you specified report filters. Session reports include basic session information along with links to session details, chat transcripts, and video recordings of screen sharing, Protocol Tunnel Jumps, and command shells.

Access Session Detail

Session reports detail a record of the full chat transcript, the number of files transferred, and specific actions that took place during the session. Windows events that present obvious visual changes within a session are captured as events in the session details. This primarily includes changes to the foreground window, with the executable name and its window title.

Other session information includes the session duration, local and remote IP addresses, and remote system information (if enabled). Reports can be viewed online or downloaded to your local system.

If session recording is enabled, view a video playback of individual sessions, including captions of who was in control of the mouse and keyboard at any given point during the session. If Protocol Tunnel Jump recording is enabled, view video recordings of the user's entire desktop. If command prompt recording is enabled, view recordings and/or text transcripts of all command shells run during the session. All recordings are stored on the BeyondTrust Appliance in raw format and are converted to compressed format when viewed or downloaded.

Access Summary Report

Summary reports provide an overview of activity over time, categorized by user. Statistics include the total number of sessions run, the average number of sessions per weekday, and the average duration of sessions.

Reports :: Team Activity

Range Start, Duration, Range End

Select a start date for which to pull reporting data. Then select either the number of days for which to pull your report or an end date.

Limit To

Choose the team for which you want to view activity logs.

Team Activity Report

View all team activity that matches the criteria specified on the previous page. Team activity reports include information about users as they log in or out of the access console, chat messages sent between team members, user-to-user screen sharing actions as logged in chat, and files shared and downloaded.