Session Log
Session logs are stored for SSH/Telnet, RDP/VNC, SFTP, and SQL Proxy sessions established by the user on Kron PAM. The packets are sent to the server in the following format:
sessionId | Specific ID of the log in the PAM Database |
---|---|
userName | The username that started the session |
userId | User ID of the user who started the session |
tenantId | Tenant that the session was started |
host | KRON PAM Host IP |
hostName | Device name of the established session |
startTime | When the session started |
endTime | When the session finished |
globalUserName | GlobalUserName is used for authentication |
clientIp | Source IP of the device that started the session |
instanceName | The instance by which the session was started |
accessProtocol | Access protocol with which the session was started |
totalDuration | Total duration of the user in the session in seconds |
idleDuration | Idle duration of the user in the session |
remoteApplicationName | Application name in the RDP Proxy session |
Example:
The test user initiated an SSH session to a device named PAM4260 on Kron PAM:
The test user initiated a remote desktop session to a device named Windows on Kron PAM: