# The activity log

Read the raw trace of authentication attempts on your products, row by row, filterable by status, by step, by identifier hash and by IP address.

Source: https://docs.sealtrust.io/en/console/journal-activite/

---

Every attempt to read a chip or a QR leaves a row: the step reached, the
result, the duration, the place and the address it came from. This screen gives
that raw trace, where analytics only gives curves. You open it to understand
why a scan failed, to find the attempts on one identifier, or to see what
arrives from a given address.

![Console activity log, with its filters and the authentication events table](/console/journal-activite.en.webp)

## What the screen shows

The header carries "Audit log" and "NFC authentication history and system
actions". Four counters follow it: "Total (page)", "Success", "Errors" and
"Avg. duration" in milliseconds. They only summarize the rows on display.

A filter bar gathers a status menu, a step menu, a "UID hash..." field and an
"IP..." field.

The "Authentication events" table has eight columns: "ID", "Date", "UID",
"Step", "Status", "Duration", "Location" and "IP". The identifier hash is
truncated there to 12 characters followed by an ellipsis. The status is a green
pill for a success, red for an error, amber otherwise. The location gives the
city and the country when they are known, otherwise "GPS" if a latitude exists,
otherwise a dash.

The table footer recalls the current offset and the number of results, between
"Previous" and "Next". When nothing matches, the area shows "No logs found with
these filters".

## What you can do here

Filter on a status: "All statuses", "Success", "Error" or "Timeout". Filter on
a step: "All steps", NDEF Read, Select, Auth or Challenge Sent. Search for one
precise identifier hash, or one precise IP address. Any change to a filter
resets the offset to zero.

"Refresh" restarts the read.

## What conditions access

The "Activity log" entry lives in the "Analysis & Audit" section, with no plan
lock and no profile hiding, and the content waits until the account is
recognized as an administrator. A brand account only sees the rows whose
identifier hash matches one of its products. An administrator account with no
accessible brand gets no row at all, its query being empty by construction. The
former `/audit` address redirects to `/activity`.

## What the screen refuses

No export is offered here. Downloading this log goes through another route,
reserved for plans that include the `exports` feature.

Rows come back in pages of 20, capped at 100 server-side, from the most recent
to the oldest, along with their total and their number of pages. An out-of-range
page number is refused explicitly, without bringing the server down.