The Sessions page only can be viewed with Audit Plus enabled. Please contact Morro support to enable Audit Plus.


The Sessions page shows the connections within the system. Each session contains a set of events that can be viewed on the Events page.



Search Session Logs

Filters

The Sessions log has the following filters.

  • Period
  • Since
  • Until
  • Sessions by User
  • Sessions by Gateway (include Team Portal)
  • Sessions by Share


Period

Select a time period to filter sessions by date. Select "Custom Period" to manually set a start and end date.


Since

Enter the start date for the log filter.


Until

Enter the end date for the log filter.


Sessions by User

Choose from a list of existing or deleted users.


Sessions by Gateway

Choose from a list of existing or deleted gateways.


Sessions by Share

Choose from a list of existing or deleted shares.


Click GET PREVIEW/STATISTICS to get the preview/statistics of sessions.


Heatmap

After clicking GET PREVIEW/STATISTICS, a heatmap of the searched sessions will appear on the Sessions page. Darker colors indicate more sessions and lighter colors indicate fewer sessions. Mouse over on the grid to see more detailed information.



SHOW SESSION LOG

Clicking the SHOW SESSION LOG button to view searched session logs.




Manage Session Logs

Admins can manage the results table generated by the session log.


Time zones

Use different time zones to display sessions according to your needs.

  • Use UTC Time Zone
  • Use Local (Browser) Time Zone
  • Use Time Zone Set in Preference


Columns

Select which columns to display by checking or unchecking the space next to the column name.


By default, the session log displays the columns:

  • Session ID
  • Connect (time)
  • Gateway
  • User ID
  • Client IP
  • Client Hostname


The remaining column options include:

  • Disconnect (time)
  • Share


Results Per Page

Choose the number of results per page. If the number of results exceeds the per-page count, use the right and left arrows to change pages.


Session ID

Session ID is a unique ID for an SMB connection session. Click the Session ID to create an event stream for the selected session. The event stream of a session ID displays all the events that occurred during the session. For more information about event streams, please refer to the article Events.