Security logs page

Security logs can only be seen by an administrator.

The Security Logs record key events that could impact the safety of your system, including failed login attempts, changes to account configurations, the addition of new administrators, and password updates.

These logs provide a detailed and transparent record of important activities, making it easier to track and respond to any potential security concerns.

The security log event levels are:

• Info – General informational messages or successful events that indicate normal system operations.
• Warning – Events that do not necessarily indicate a security issue but might signal potential concerns. Repeated warnings could highlight patterns leading to more serious problems.
• Error – Critical issues requiring immediate attention from the security team.

Calendar

The calendar lets you quickly navigate to a different date over the last two weeks. The icon on each date shows the highest level of event that occurred on that day.

You can use the Date filter in the following option to select a date outside the dates shown on the calendar.

Security logs filter

The filtering options let you narrow down your search to specific criteria. They take effect immediately as you select or type in these options.

The Date filter loads the security logs for that date. You either select a specific date or use the and buttons to navigate to the previous and next date.

Use the Display level filter to choose whether to display all logs or only Errors and warnings.

The Event type drop-down lets you narrow down the logs events to a single event type.

The Filter logs field lets you enter text that the logs message, IP, or username should match. The matching terms are automatically highlighted as you start typing.

Log entries

The security logs capture and display the following information for each security event. When there are many entries, you can use the buttons, and the drop-down on the right preceding the table, to select the page and number of log events to display for each page.

Time

The time of the day the event occurred for the selected date. The display shows the server time.

Event type

The type of security event. To make some events easier to identify, these are color-coded.

IP

When known, the IP address of the source request that caused the security event.

Agent

When known, the user agent used to connect to PageSeeder. It is based on the user agent string sent by the client. It usually includes the name of the browser, operating system, and type of device (Desktop or mobile).

Path

The HTTP method and path of the request.

User

When known, the username associated with the account that made the request. If the user isn’t known, it shows "Anonymous". Click the username to show the member panel.

Message

A description or explanation of the security log event. The message is preceded by an icon denoting the log level.