All actions performed by a EV Reach operator are audited. The default implementation records audit traces in the Windows Event Application Log, however, audits can be centralized using the EV Reach Server.
See Find out more.

The Remote Control action benefits from additional auditing that can be queried remotely. This article describes the audit information provided and how to query it from the EV Reach Operator Console.

What information is logged during a remote control session?

The following information is captured during a remote control session.

• Client - The target computer that is being controlled
• Client User - The logged-in user. This can be the console user or an RDP/Citrix session
• Start Time - The time the remote control session was started
• End Time - The time the remote control session was ended
• Admin User - The EV Reach operator
• Admin Machine - The computer that the EV Reach operator is logged in to
• Session ID - The logon session of the target user
• Misc - This column represents

Where can audit information be found?

The EV Reach Client is responsible for logging remote control sessions. Information is recorded in several locations for redundancy and flexibility.

Audit information is stored in the following locations:

• Windows Application Event Log (on the target workstation)
• EV Reach Client proprietary log
• EV Reach Server

Remotely Querying the Remote Control Audit Logs

Via EV Reach Remote Control

The proprietary log is maintained by the EV Reach Client and can be accessed from the EV Reach RC UI.

Access the log from the Favorites section. Right-click any workstation and select View Session Log:

Via the EV Reach Client Configuration Control Panel Applet

You can access the remote control session log of a machine by accessing its EV Reach Client Configuration control panel applet.

1. Select the Local Desktop Access tab
2. Click on View Access Log.

Via the EV Reach Process Automation Feature

You can generate a report of EV Reach remote control session activity across multiple machines using a EV Reach Process Automation.

• Create a Process Automation, configure the machine scope
• Under Actions, configure Report > Remote Control Session History.

The EV Reach Server

The EV Reach Server will automatically collect Remote Control logs and centrally store them. For more information, see the EV Reach Server.

In the EV Reach Server console, click on the Audit tab on the Command Bar to view the real-time audit log. For more information on this screen see, EV Reach Auditing Services.