---
title: Audit Logs
slug: kronpam-reference-guide-3-5-0/audit-logs
description: Learn how to perform audits using Kron PAM Logs. Audit users with appropriate functions can mark sessions as Passed, Failed, or N/A and view session details such as session ID, audit result, comment, time, host IP, start and end time, user name, and clien
docTags: 
createdAt: 2022-08-02T06:57:31.000Z
---

Users can perform audits by checking the Kron PAM Logs. There is a feature that allows logs to be assigned a status, such as **Passed**, **Failed**, or **N/A**. This feature defines a user called an Audit User. Audit users are users with the “sc.log.session.auditor” portal function (To assign this portal function to a user, please refer to section Menu Lists Management). Audit users can mark the sessions as **Passed** **audit**, **failed**, or **N/A** after they have examined the session, allowing admins users to take action. The Audit Logs include the session ID, audit result, audit comment, audit time, auditor host IP, hostname protocol used, instance name (who connected to that system), session start and end time, user name, the global username used to connect to the system, and the client IP.


To see session audits:

1. Navigate to** Logging** > **Session Logs**.
2. Open the** Audit Logs** tab.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/jyz8LlzsJLChXhlO9-eD2_image.png "Audit Logs")

:::hint{type="info"}
Audit users must have the **sc.log.session.auditor** portal function defined to reach the Audit Log screen.
:::

To record session audit results:

1. Click the** Options** button, then click **Enter Audit Report**.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/RUe1hsrgc7IlCLas_ALy7_image.png "Enter Audit Report")

- Enter the** Audit Result** and the** Audit Comment** and click **Save**.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ouPAnFaJOaoPf2VFKB2jI_image.png "Audit Logs")

:::hint{type="info"}
Multiple auditors can enter audit results for the same session.
:::