Secure LDAP audit log

This feature is available with G Suite Enterprise, Cloud Identity Premium, G Suite Enterprise for Education, and G Suite for Education.

Two types of audit logs are available for the Secure LDAP service:

  • Admin audit log (for information, see Admin audit logs)
  • LDAP operations audit log

Note: For details on when log data becomes available and how long it's retained, see Data retention and lag times

Step 1: Open your LDAP audit log

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Reports.

    To see Reports, you might have to click More controls at the bottom.

  3. On the left, click Audit and then LDAP.
  4. (Optional) On the toolbar, click Manage columns Manage columns and select the columns you want to see or hide.

Step 2: Customize and export your audit log data

Filter the audit log data by user or activity

You can narrow your audit log to show specific events or users. For example, find all log events for when a user login failed because the application was not configured for the user.

  1. Open your LDAP audit log as shown above.
  2. Click Add Filter.
  3. Enter or select the criteria for your filter. You can filter on any combination of the data you can view in the log.
  4. (Optional) Click Date range, select a period from the list, or enter a start and end date, and time.
  5. Click Apply.

Export your audit log data

You can export your audit log data to Google Sheets or download it to a CSV file.

  1. Open your audit log as shown above.
  2. (Optional) To change the data to include in your export, click Manage columns Manage columns, select or remove the columns that you want to export, and click Save.
  3. Click Download Download.
  4. Under Select columns, click Currently selected columns or All columns.
  5. Under Select format, click Google Sheets or comma-separated values (CSV).
  6. Click Download.

You can export a maximum of 100,000 rows to Sheets or CSV.

How old is the data I'm seeing?

For details on exactly when data becomes available and how long it's retained, see Data retention and lag times.

Step 3: Set up email alerts

You can easily track specific LDAP activities by setting up alerts. 

  1. Open your audit log as shown above.
  2. Click Add Filter.
  3. Enter or select the criteria for your filter.

    To set up an alert, you can filter on any combination of the data you can view in the log except date and time range.

  4. Click Create Alert and enter a name for the alert.
  5. At Recipients, click Turn on Turn on to send the alert to a super administrator account.
  6. Enter the email addresses of any other alert recipients.Enter the email addresses of any other email alert recipients.
  7. Click Create.

To edit your custom alerts, see Administrator email alerts.

Isso foi útil?
Como podemos melhorá-lo?