Commands executed in SSH/Telnet Proxy, SFTP Proxy, and SQL Proxy sessions and texts that are captured by the OCR algorithm in RDP/VNC Proxy sessions are listed in the Command Logs tab.
Navigate to Logging > Session Log.
Open the Command Logs tab.
Enter search filters and click the Search button. (e.g., searching who ran the command “pwd” and when)