Running a File Audit Report

Updated 3/11/2013

Locate the File Audit Report from the list of reports available.

When you click on the File Audit Report, the following dialog is presented allowing you to choose the parameters for the report.

Audit report name is a mandatory field to help identify your reports. Besides the report name, you need to choose at least one audit parameter to run the report.



You may select one or more parameters to narrow down the file and folder activity you would like to view.

  • File name – Choose to view activity on specific files. You may use a wildcard ‘*’ character anywhere except in the beginning of the file name.
  • Date range – Narrow down auditing by activity date. Note that Egnyte purges all audit logs older than 3 months.
  • Transaction Type – Specify one or more file/folder activities that you want to audit. You may choose from upload, download, preview, delete, copy, move, restore from trash, delete from trash, create link, delete link, download link. 
  • Select user – Choose the list of users whose activity you wish to view.
  • Folder name – You may enter folder names e.g. /Shared/Marketing or choose a folder by navigating the folder structure. Note that when you select a folder all subfolders are included automatically.  

When you select multiple parameters, the report will generate results matching all of them. For instance, if you enter both a file name and a folder name, the report will include activity for the files within those matching folders.

Viewing File Audit Report Output

When you submit any audit report, you will receive an email within few minutes letting you know that the report is ready for viewing. The reports are also accessible through notification messages displayed on your home page.

Note: Since audit logs for file activity are captured periodically through the day, you may not see activity for the last few hours in your report.

The File audit report displays the following information

  • User name – user who performed the file or folder action
  • File Folder – file information
  • Target path – applicable for move actions, displays the destination folder that the file or folder was moved to.
  • Transaction type – the type of file activity - upload, download, preview, delete, copy, move (rename), restore from trash, delete from trash, create link, delete link, download link.
  • Transaction Source – Indicates the access interface over which the file activity happened
  • Date – provides the time stamp of the file or folder activity
For Link Downloads, you'll note that the User/Location column includes the geographic location and IP Address of the user who downloaded the link.
Was this article helpful?
3 out of 4 found this helpful
Have more questions? Submit a request


Article is closed for comments.