User Activity Log

Topic

This article explains how to download the User Activity Log for BCDR devices available via the Datto Partner Portal and what information is logged.

Environment

  • Datto Partner Portal
  • Datto SIRIS
  • Datto ALTO
  • Datto NAS

Description

The new BCDR User Activity Log gives Datto partners with portal access the ability to audit data for user activity. You can download the audit log from the new BCDR Logs and Reports drop down menu in the partner portal.

NOTE: This feature is only accessible to users with Tech or Admin User roles

How do I download the user activity log?

  1. From the partner portal top navigation menu, select Status and click BCDR Logs and Reports.


Figure 1: BCDR Logs and Reports.

  1. On the BCDR Logs and Reports page, you'll see options for three different types of reports. On the tile labeled User Activity Log, click Go to Activity Log


Figure 2: Go to Activity Log

  1. Select the BCDR device you wish to audit by clicking in the BCDR Device window. You can select all devices, multiple devices, or specify a single device.


Figure 3: Select devices

  1. Specify a Date Range. You can specify 1, 7, or 30 days.


Figure 4: Specify Date Range

  1. You can specify a particular user by entering their User name in the User box. This step is optional.


Figure 5: User

  1. Once you've made your selections, Click Get Activity Log.


Figure 6: Get Activity Log

You can download a report that provides additional data in .CSV format by clicking Download CSV.


Figure 7: Download CSV

Download the log using the REST API

You can also access the audit data via the REST API available under the Admin drop down of the top navigation menu in the portal. Select Integrations from the drop down menu.


Figure 8: REST API

What information is logged?

The following changes are recorded in the user activity logs:

  • Local Access Turned On/Off
  • Local Login to device
  • Remote Login to device (RLY) (RLY forced login must be enabled for the action to get logged)
  • Local Virtualization shut off/removed
  • Local File Restore Delete Requested
  • Local File Restore Requested
  • Protected System Backup Snapshot deleted
  • Protected System Paused
  • Task Assigned to device
  • Device Alerts Paused
  • Support Ticket Created
  • Change to Recipient of Device Alerts
  • Offsite Audit Viewed