Account Sign-in and Lockout Audit History

Tracker keeps an audit history of the following information for the past 90 days:

User sign-ins to Tracker

User lockouts that are caused by too many failed sign-in attempts

Tracker does not keep audit history for:

Failed sign-in attempts that do not result in a lockout

Account Inactivity Lockout Guidelines

Account lockouts occur when users:

Exceed the number of allowed failed sign-in attempts.

Have not signed in to Tracker for a designated (configurable) number of days.

Reviewing sign-in and lockout audit history

To see a user's sign-in and lockout history:

Click Users
> User list
from the left navigation.

Click Edit
in the Admin Profile
column next to the user you want to review.

On the toolbar, select the three small dots three small dots icon, then select Export sign-ins & lockouts
.

Below are details and specifications regarding the export of the sign-in and lockout data:

Column Title	Data Notes
User Last Name	User's last name from their user profile
User First Name	User's last name from their user profile
User ID	The ID that the user enters to sign in. It is also his or her email address.
User Entity	The short name of the user's entity. For law firm users, this will be the firm short name.
Event Date	Date and time (Pacific Time) that the user either signeed in or was locked out.
IP Address	The IP address of the computer or network from which the user signed into Tracker. For those events recorded as a lockout, this is the IP address of the last failed sign-in attempt before the lockout occurred.) If you suspect that a user may be trying to gain unauthorized access, your company's IP department can use the IP address shown in this export to help trace the identify of the user signing in.
Event	This will either be Login or Lockout.