- Log in to the LogRhythm NDR UI as an administrator.
- Click the System tab. In the drop-down menu, click Audit Trail.
The System / Audit Trail page appears.
- To display the activity of a particular user, scroll down the Message column for the user name.
- To display the system IP address of a particular user, scroll down the User IP Address column for the IP address.