View Audit User Activity

  1. Log in to the LogRhythm NDR UI as an administrator.

  2. Click the System tab. In the drop-down menu, click Audit Trail.
    The System / Audit Trail page appears.

  3. To display the activity of a particular user, scroll down the Message column for the user name. 

  4. To display the system IP address of a particular user, scroll down the User IP Address column for the IP address.