Running a File Audit Report

Locate the File Audit Report from the list of reports available.

When you click on the File Audit Report, the following dialog is presented allowing you to choose the parameters for the report.

Report name is a mandatory field to help identify your reports. 


You may select one or more parameters to narrow down the file and folder activity you would like to view.

  • Date range – Narrow down auditing by activity date. Note that Egnyte purges all audit logs older than 3 months.
  • ActionsSpecify one or more file/folder activities that you want to audit. You may choose from upload, download, preview, delete, copy, move, restore from trash, preview, delete from trash, create link, delete link, download link, create upload link, delete upload link, and upload via upload link.
  • FoldersYou may enter folder names e.g. /Shared/Marketing or choose a folder by clicking “selected folders” and navigating the folder structure. Note that you have the option to automatically include or exclude subfolders.
  • Files – Choose to view activity on specific files. You may use a wildcard ‘*’ character anywhere except in the beginning of the file name.
  • UsersChoose the users or groups whose activity you wish to view.

When you select multiple parameters, the report will generate results matching all of them. For instance, if you enter both a file name and a folder name, the report will include activity for the files within those matching folders.

Viewing File Audit Report Output

When you submit any audit report, you will receive an email within few minutes letting you know that the report is ready for viewing. The reports are also accessible through notification messages displayed on your home page.

Note: Since audit logs for file activity are captured periodically through the day, you may not see activity for the last few hours in your report.

The File audit report displays the following information

  • Date – provides the time stamp of the file or folder activity
  • User – user who performed the file or folder action
  • Access – Indicates the access interface over which the file activity happened
  • Path – Shows the folder path for the file or folder
  • Action – the type of file activity - upload, download, preview, delete, copy, move (rename), restore from trash, delete from trash, create link, delete link, download link, create upload link, delete upload link.
  • Action info – where applicable, shows additional info on the action taken. E.g., for move/copy actions, the destination folder that the file or folder was moved to is displayed. For link create/delete/download actions, the link URL is displayed.
For Link Downloads, you'll note that the User column includes the geographic location and IP Address of the user who downloaded the link.
Egnyte Community

Egnyte Community

Want to connect with other Egnyte users and our Egnyte team? Share ideas and ask questions in our Community .