Twingate allows customers to view and export admin action activity on their account. This can be useful for troubleshooting or investigatory purposes. The activity exported includes create, delete, edit, and connect events for the following objects:
- Public API Key
- Remote Network
- Service Account & Service Account Key
This report can be manually exported via the Admin console as a JSON file.
To create an export:
- Navigate to the Reports page under Settings
- Click Generate Admin Actions Report to generate a new report
- Select the time range and the category you want to export. The time range will use your local timezone, even though the export itself will have timestamps in UTC.
- The export will complete in the background and email you when it's ready. Most exports will only take a few minutes, though very large ones could take a few hours.
- Go back to the Reports page to download completed reports.
How to view the export
Exports are created in GZIP format, which you can use most free compression tools to decompress. After decompression, we recommend you rename the file by adding
.csvto the filename, which will make it easier to open in a spreadsheet editor.
Twingate exports network events in CSV format. Each admin action is represented as a single line, and represents:
- When the event happened
- The actor of the event
- What action happened
- The final state (including the before state if applicable)
Details of the event columns are below:
time: the beginning of the network communication
actor: the user making the change
action: the type of event (create, delete, edit, or add / remove relation)
target: object impacted (e.g. user, group, Remote Network)
Updated about 1 month ago