Home Security What do Date, User, Action, IP Address, and Location mean in the Access log?

What do Date, User, Action, IP Address, and Location mean in the Access log?

Last updated on Oct 15, 2025

Short Answer:
Each row represents a login-related event: Date (timestamp), User (account), Action (event type), IP address (source), and Location (geolocation of the IP).

Prerequisites

  1. Open Settings > Security > Access logs in Everdone

Steps

  1. Open Settings > Security and select Access logs.
    The table headers show Date, User, Action, IP address, Location.

  2. Read a row to interpret an event, for example:

    • Date: Apr 17, 2024 09:24 AM

    • User: John Doe

    • Action: New device

    • IP address: 192.108.1.1

    • Location: Bangalore, India

  3. Correlate Date, User, IP address, and Location to investigate activity (who, when, from where).

  4. If you need more context, hover the Action value to see a tooltip explaining the event.

Troubleshooting

  1. Location doesn’t match the user’s city

    • LikelyCause: IP geolocation is approximate; user may be on a VPN, mobile network, or travel Wi-Fi.

    • Action: Note the IP address and confirm with the user whether a VPN/different network was in use at that time.

Note: Location is inferred from the IP address and may not be exact.