Monitor User Activity

Applies To: WatchGuard Advanced Reporting Tool This topic applies to the optional WatchGuard endpoint security module, Advanced Reporting Tool. The Advanced Reporting Tool is available with WatchGuard EPDR and WatchGuard EDR.

The User Activity tab shows which computers are used by specific users on the network.

To change the chart to reflect which user accounts have access to each computer, you can change the order of the tags in the Legend bar to machine, user.

To see user activity, from the WatchGuard Endpoint Security management UI:

1. In WatchGuard Cloud, select Monitor > Endpoints.
2. Select Status.
3. From the left pane, select Advanced Visualization Tool.
   A new browser tab opens.
4. From the left pane, select Advanced Reporting > Data Access Control.
5. Select the time period to filter the data on.

6. Click Refresh.
   The dashboard shows information for the time period selected.
7. Select the User Activity tab.
8. Review the chart for the computer you want to investigate.

Related Topics

Data Access Control Dashboard

Monitor Bandwidth-Consuming Application Processes and Users

Monitor Outbound Network Traffic

Monitor the Data Files Accessed