Short Answer:
Action indicates the login result. Hover each value to see a tooltip explanation (e.g., New device = login from a device not seen before).
Prerequisites
-
Open Settings > Security > Access logs
-
Use a desktop browser (hover tooltips)
Steps
-
Open the Access logs table and locate the Action column.
-
Hover your cursor over an Action value to reveal the tooltip.
-
Read the tooltip for the exact meaning. You may see messages like:
-
New device: Login attempt from a device not seen before.
-
Recognized device: Login successful from a previously used device.
-
Incorrect password: Login attempt failed due to an incorrect password.
-
MFA failed: Login failed; correct password entered, but MFA verification was unsuccessful.
-
-
Combine the tooltip with Date, User, and IP address to decide next steps (e.g., verify activity, escalate).
Troubleshooting
-
No tooltip appears when hovering
-
LikelyCause: Not hovering directly over the Action text, or using a touch-only device.
-
Action: Hover precisely on a desktop browser; try a different browser or enlarge the window if needed.
-
Note: Tooltips provide the authoritative, in-app definitions—check them before taking remediation steps.