Investigate user problems with log events

As your organization's administrator, you can monitor your users’ activity to troubleshoot any problems they’re experiencing. You can search log event data with preset searches based on common queries and log events.

Search for problems with the security investigation tool

To complete these steps, you need the appropriate User management privilege. Without this privilege, you won't see all the controls needed to complete these steps.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DirectoryUsers.
3. In the Users list, click the user. If you need help finding the user, go to Find a user account.
4. At the top, click Investigate.
   
5. In the Check log events for issues related to this user section, next to a log event, click View logs to review the event issues related to the user.
6. In the Audit logs related to this user section, next to a log event, click View logs to review the event issues related to the user.

Related articles

• About the security investigation tool
• Run a search in the investigation tool
• Manage your investigations
• Common uses for the investigation tool