Skip to main content
Feedback

Viewing transaction logs

A Transaction Log Report lets both users and administrators to analyze file system activity. The MFT server records all file system transactions, with each transaction comprising an operation with a detailed list of the file and/or folder items that include operation-specific data. To access the Audit Transaction Log, click the Transaction Log tab.

The following is a list of form controls.

Filters marked with † accept wildcards (either * or %).

General filters

  • Operation: Select one or more operations. The All option overrides individual selections.
  • Application: Filter a specific client application.
  • Operation ID: Report result includes operation IDs. You can filter by an ID to access an operation directly.
  • Item ID: Report result includes item IDs in basic and full-detail layouts. You can filter by an Item ID to get the operation that includes the item.
  • Operation Date/Time (UTC): Operation creation date range. To clear a date, open the date popup and click "Reset". The default end date is set to the next day to cover geographical areas where UTC time is a few hours ahead of local time.
  • Rows per Page: Maximum number of operations shown on one page.
  • Sort: Report result is sorted by Operation ID.
    Use this filter to specify ascending or descending order. For further sorting, export the results to Excel.

User filters

  • MFT Active User: Select one of the active users (for managers and administrators only).
  • MFT User Email†: Enter email or part of the email. This filter can be used to query deleted users.
  • External User Email†: External user is either a secure message recipient, including CC and BCC, or MFT Dropbox sender. Specify the email or part of the email.
  • Client IP Address†: Client IP Address is captured for all operations. Multiple users might have the same IP if their requests go through a corporate proxy.

Folder filters

  • Select Path: Select a folder from the active folder list. To get operations on immediate children only uncheck the Include Sub-folders checkbox. Note that the folder is filtered by a path string. Therefore, if the path has been renamed, results will not include entries logged with previous paths.
  • Enter path†: Specify a folder or part of the path with wildcards. This filter can be used to query deleted folders.
  • File Name†: Enter the exact file name or part of the name with wildcards.

Message delivery filters

  • MFT Tracking No.: Tracking No. is captured for message delivery and external download operations.
  • Message Subject†: Enter full or part of the subject. The message subject is captured in Secure Message and External Download operations.
  • Message State: Choose between active only, expired only, or all.
  • Message Body†: Enter search expression with a wild card.
  • Private Message†: Enter search expression with a wild card.
On this Page