Can I export the audit log?

Yes, on the Business plan and above. The audit log exports as CSV and each session's evidence pack as PDF or JSON; on the Enterprise plan, events can also be forwarded to your SIEM.

How can I show what happened in a session?

Export the session's evidence pack. It brings the consent decision, the timeline of audit and recording events, the recording details and file transfers together in one PDF or JSON file. The recording files themselves stay on your computers.

Can I forward events to my SIEM?

Yes, on the Enterprise plan. SIEM export puts remote-access events alongside the rest of your security telemetry.

Which plans include audit export and SIEM forwarding?

The audit log and its export are part of the Business plan and above; SIEM export is part of the Enterprise plan.

Feature: audit log

An audit trail you can hand to a security team

Every connection is logged and provable: who connected, when, to which device and for how long, and on recorded sessions, what they did. Export it as CSV with per-session PDF evidence packs, or forward it to your SIEM.

Start free Docs

hand to a security team

Every session on record

Session and administrative events are recorded to the audit trail, and each session's evidence pack ties consent, events, recording and file transfers together.

Full session timeline

Session events are captured in order, with actor and timestamp: sign-in, consent, session start and end, file transfers; on recorded sessions also commands, active windows and privilege elevation.

Export and forward

Export audit logs as CSV and per-session evidence packs as PDF, or forward events to your SIEM so remote access shows up alongside the rest of your security telemetry.

Evidence packs

A per-session evidence pack bundles the timeline and, where the session was recorded, the recording details. It is ready to hand to an auditor.

What gets captured

The events that matter for security and audit, recorded automatically.

Operator sign-in, including 2FA

Connection requests, consent and declines

Session start, duration and end

File transfers, with file and size

Privilege elevation, on recorded sessions

System actions such as reboot, lock and sign-out

Who the audit log is for

Provable access satisfies the people who ask hard questions.

Security teams

Review who connected where and, on recorded sessions, what operators did, with the events in your SIEM.

Auditors

Exportable records and per-session evidence packs that stand up to review.

Large clients

Prove governance over remote access without bolting on extra tools.

Frequently asked questions

Connections, duration, device, operator and access type, plus consent decisions, file transfers and system actions; on recorded sessions also commands, active windows and privilege elevation.

Make remote access provable

Turn every connection into a record you can export, forward and defend, without adding another tool to your stack.

Start free Contact us

Audit export from Business, SIEM on Enterprise