Authentication logs

Authentication logs capture authentication attempts that your FIC end-users have made.

Viewing authentication logs

1. Click Log and Report >Authentication Logs.
2. Click Filters.
3. Select the filter(s).
4. Click OK.

Each authentication log captures the following data:

Column	Description
TIMESTAMP	The date and time of an authentication request. Note: FIC captures the time of an event in UTC time, and then converts it to the client browser's local time zone, which is the time shown in the timestamp.
USERNAME	The username of the user who made the request.
APPLICATION	Shows either of the following: The serial number and VDOM name if the application is an FGT device. The source IP address if the application is a third-party device.
REALM	The realm ID of the realm from which the authentication request is attempted.
ACTION	The authentication action.
STATUS	The status of the authentication request expressed in standard HTTP status codes. See List of HTTP Status Codes.
RESULTS	The outcome of an authentication request, which can be either of the following: Success Failed
DETAILS	View log details.

Filtering logs by date and time

This option enables you to display logs for the period of time you specify.

1. In the upper-left corner of the page, choose the start date and time and the end date and time.
2. Click Filter.

Filtering logs by user

This option enables you to filter the logs by username.

1. In the upper-left corner of the page, below the Start date and End date filter, click user.
2. From the drop-down menu, select a username.

Filtering logs by status

This option allows you to filter logs by HTML status code.

1. In the upper-left corner of the page, below the Start date and End date filter, click status.
2. From the drop-down menu, select an HTML status code.

Sorting the log table

You can sort the entries in the log table by clicking any of the column headers, namely:

• Timestamp
• Username
• applications
• Results