---
title: CommandLog_Ocr
slug: kronpam-how-to-guides/commandlogocr
docTags: 
createdAt: 2025-04-30T11:42:07.902Z
---

This log type applies only to RDP Proxy and contains text logs captured via OCR during remote desktop connections in Kron PAM. The packets are sent to the server in the following format:

| **sessionId**        | Specific ID of the log in the PAM Database                                                                             |
| -------------------- | ---------------------------------------------------------------------------------------------------------------------- |
| **userName**         | The username that transferred the file during the remote connection                                                    |
| **host**             | Kron PAM Host IP                                                                                                       |
| **tenantId**         | Tenant, the command log was captured.                                                                                  |
| **sessionStartTime** | When the session started                                                                                               |
| **sessionEndTime**   | When the session finished                                                                                              |
| **globalUserName**   | GlobalUserName is used for authentication                                                                              |
| **clientIp**         | Source IP of the device that executed the command                                                                      |
| **commandTime**      | Exact time the file transfer started                                                                                   |
| **command**          | Captured texts via OCR                                                                                                 |
| **allowed**          | If the executed command is allowed by the administrator or not<br />allowed=true is the default value for RDP sessions |
| **instanceName**     | An instance in which the command log was captured.                                                                     |
| **deviceGroups**     | Group names of the device on which the command is executed                                                             |

**Example:**

An OCR text captured logs during a remote desktop session of a Test user on Kron PAM:

:::BlockQuote
\{sessionId='65c2f8e2-49aa-4a22-bdf1-47e13c03cb02', userName='test', host='10.10.10.10', tenantId='krontech', sessionStartTime=2025-04-22 14:05:31.592, sessionEndTime=null, globalUserName='Administrator', clientIp='10.0.1.1', commandTime=2025-04-22 14:07:09.596, command='. ...I = | Application Tools Downloads\nHome Share View Manage (7?)\nAb > This Pc Downloads Search Downloads -\nName Date modified Type Size\noF Quick access\nI Deskt a FileZilla\_3.68.1\_winf4-setup 27/2025 15 PM Application 12,160 KB\neskta\nPp ay WinscP 4/16/2024 3:57 PM Application 22,461 KB\nF Downloads Ee FileZilla\_3.69.0\_win..d-setup 4/22/2025 11364M Application 12,153 KB\n=| Docurnents\n\n=) Pictures\n\nfilezilla\n\nThis PC\n\n> Network\n\nDESKTOP-QHEBMOC\nDESKTOP-D\&TRE8H\nDESKTOP-LEQ\&V2T\n\ntsclient\n\nWINTITEST\nWIN-MS34PO5 SV\nWIN-VLYOCOGFOGI\n\n3items 1 item selected 21.9 MB\n\n', allowed=true, instanceName='localhost.localdomain', deviceGroups=DG1, DG2', context=null }
:::