Skip to main content
Managing users
Search
Search Legal Tracker Help and Support.

This article applies to:

  • Product: Legal Tracker
  • Subject: User account
  • Audiences: Company

Account Sign-in and Lockout Audit History

note
Not applicable for OnePass, Active Directory, or SAML sign-in options.
Tracker keeps an audit history of the following information for the past 90 days:
  • User sign-ins to Tracker
  • User lockouts that are caused by too many failed sign-in attempts
Tracker does not keep audit history for:
  • Failed sign-in attempts that do not result in a lockout
  • Account Inactivity Lockout Guidelines
Account lockouts occur when users:
  • Exceed the number of allowed failed sign-in attempts.
  • Have not signed in to Tracker for a designated (configurable) number of days.

Reviewing sign-in and lockout audit history

To see a user's sign-in and lockout history:
  1. Click
    Users
    >
    User list
     from the left navigation.
  2. Click
    Edit
    in the
    Admin Profile
     column next to the user you want to review.
  3. On the toolbar, select the three small dots three small dots icon, then select
    Export sign-ins & lockouts
    .

Audit history export details

Below are details and specifications regarding the export of the sign-in and lockout data:
Column Title
Data Notes
User Last Name
User's last name from their user profile
User First Name
User's last name from their user profile
User ID
The ID that the user enters to sign in. It is also his or her email address.
User Entity
The short name of the user's entity. For law firm users, this will be the firm short name.
Event Date
Date and time (Pacific Time) that the user either signeed in or was locked out.
IP Address
The IP address of the computer or network from which the user signed into Tracker. For those events recorded as a lockout, this is the IP address of the last failed sign-in attempt before the lockout occurred.) If you suspect that a user may be trying to gain unauthorized access, your company's IP department can use the IP address shown in this export to help trace the identify of the user signing in.
Event
This will either be Login or Lockout.