--- title: "Understanding Audit logs" slug: "understanding-audit-logs" tags: ["GateManager", "Audit"] updated: 2021-04-21T14:18:08Z published: 2021-04-21T14:18:09Z canonical: "kb.secomea.com/understanding-audit-logs" stale: true --- > ## Documentation Index > Fetch the complete documentation index at: https://kb.secomea.com/llms.txt > Use this file to discover all available pages before exploring further. # Understanding Audit logs The intention of this article is to introduce the administrator to audit log entries. The intended audience is Domain Administrators. All the actions on the SiteManager we made in the previous sections are logged on the GateManager. It does, however, require some explanation to understand what is logged where. For instance, if we want to check what devices Jeff has connected to recently. If we look at Jeff's account we see what events have occurred on Jeff's account, and not what Jeff has done. ![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617008993867.png) So what we should look at instead, is Jeff’s LinkManager appliance object, which represents the specific PC on which Jeff’s account has been activated:![](https://cdn.document360.io/88f49507-a7a0-4636-b297-13c4d0065310/Images/Documentation/image-1617009000703.png)The reason for this is that Jeff’s account could be installed on different PCs that are operated by different people.