GAM ADV-X - User Login Activity Reports

[Chuck W. Williams]

Hi Ross and Team,

QQ--What is the best gam command to pull user login activity reports ...thanks a ton.

Regards

[Chuck W. Williams]

Ross and Team,

I am referring to the documentation here---https://github.com/taers232c/GAMADV-XTD/wiki/Reports for running a users login activity report via the GAMADV-XTD version..thanks a ton.

Regards

[Ross Scroggs]

Chuck,

See: https://github.com/taers232c/GAMADV-X/wiki/Reports

gam report logins[todrive [<ToDriveAttributes>]] [maxresults <Number>]

[([start <Time>] [end <Time>])|yesterday] [(user all|<UserItem>)|(select <UserTypeEntity>)] [event <String>] [filter|filters <String>] [ip <String>] [countsonly] [summary]

You have to decide for whom you want the login info.

user all - all users, the default

user <UserItem> - one user (<EmailAddress>|<UniqueID>)

select <UserTypeEntity> - a set of users, e.g., select group st...@domain.com

Select desired activities

https://developers.google.com/admin-sdk/reports/v1/reference/activities/list

https://developers.google.com/admin-sdk/reports/v1/appendix/activity/login

start <Time>

end <Time>

event <String>

filter <String>

ip <String>

Don't show individual events, just counts per user.

countsonly

Don't show any individual information, just counts per event for all specified users.

summary

Ross

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
To post to this group, send email to google-apps-manager@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/8393b489-2318-491c-b8df-fe3ee8a3c844%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Ross Scroggs

ross.s...@gmail.com

[Chuck W. Williams]

Thanks Ross,

So for example what would the commands look like to grab log in activity for all users,  and then a specific user for the last via successful Google PW login type

Thanks a ton

On Tuesday, October 3, 2017 at 3:14:02 PM UTC-4, Chuck W. Williams wrote:

[Ross Scroggs]

Chuck,

gam redirect csv ./AllUserLogins.csv report logins

gam redirect csv ./OneUserLogin.csv report logins event login_success filter "login_type==google_password"

The first row is the latest login

Ross

--

You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
To post to this group, send email to google-apps-manager@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/9d84f5e5-1e74-4cd4-8f2d-6a2be6120fd9%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--

Ross Scroggs

ross.s...@gmail.com

[Chuck W. Williams]

Hi Ross,

This is a bit confusing.  I see the output will be piped to a .csv file.  The first command looks like it will pull login activity for all users..am I correct?  The second command, this looks like this will pull login activity for all users but filter on just successful Google pw events..am I correct?

Is there a way to pull the same type of reports of a specific user..ie us...@domain.com and filter on just successful Google pw events?  I am asking because running a report on all users will take too long...thanks a ton.

Regards

On Tuesday, October 3, 2017 at 3:14:02 PM UTC-4, Chuck W. Williams wrote:

[Ross Scroggs]

Chuck,

It's confusing because I left something out.

I just uploaded a version that let you limit the number of activities.

gam redirect csv ./OneUserLogin.csv report logins event login_success filter "login_type==google_password" user us...@domain.com maxactivities 1

redirect csv ./OneUserLogin.csv - Send output to CSV file, omit and output goes to screen

event login_success - only show login_success events

filter "login_type==google_password"- limit to events where google_password was used, rather than SAML (whatever that is)

user us...@domain.com - The user of interest

maxactivities 1 - show latest activity

Ross

--

You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
To post to this group, send email to google-apps-manager@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/a567fe5f-4531-4fda-bedb-f7b463f7f5f3%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--

Ross Scroggs

ross.s...@gmail.com