What do Date, User, Action, IP Address, and Location mean in the Access log?
Short Answer:
Each row represents a login-related event: Date (timestamp), User (account), Action (event type), IP address (source),
and Location (geolocation of the IP).
Prerequisites
1. Open Settings > Security > Access logs in Everdone
Steps
1. Open Settings > Security and select Access logs.
The table headers show Date, User, Action, IP address, Location.
2. Read a row to interpret an event, for example:
- Date: Apr 17, 2024 09:24 AM
- User: John Doe
- Action: New device
- IP address: 192.108.1.1
- Location: Bangalore, India
3. Correlate Date, User, IP address, and Location to investigate activity (who, when, from where).
4. If you need more context, hover the Action value to see a tooltip explaining the event.
Troubleshooting
1. Location doesn’t match the user’s city
- LikelyCause: IP geolocation is approximate; user may be on a VPN, mobile network, or travel Wi-Fi.
- Action: Note the IP address and confirm with the user whether a VPN/different network was in use at that time.
Note: Location is inferred from the IP address and may not be exact.