PingOne Advanced Identity Cloud

Monitor log entries in the admin console

This beta feature is limited to development and sandbox[1] environments. It’s not available in production environments.

Advanced Identity Cloud provides a console for monitoring log entries in development and sandbox[1] environments. You can view, filter, and search log entries for specific sources within a timeframe to quickly identify issues, track events, and ensure system security.

View log events in real time

  1. In the Advanced Identity Cloud admin console, go to Monitoring.

  2. Change the monitoring settings as needed. For example, you can select specific log sources and extend or shorten the monitoring timeframe.

  3. Click Live tail.

    Advanced Identity Cloud displays the entries from the stored logs based on the selected log sources and timeframe.

    log monitoring results
    The first call to the tail endpoint returns log entries from the last 15 seconds. Subsequent calls return log entries in a range that starts from the last returned log entry in the previous result (inclusive) and ends with the latest log entry but one. If calls to the tail endpoint are not frequent enough to match the rate at which the log entries are produced, the result might not include all available log entries.
    Returning log entries could take some time. You can pause the live tail by clicking the progress spinner icon and clicking Pause logging.

  4. Search or filter the results as needed.

  5. Click a log entry to view its JSON payload.

  6. If needed, click Copy to copy the JSON payload to the clipboard.

Search and filter log entries

Search for log entries

  1. In the Advanced Identity Cloud admin console, go to Monitoring.

  2. Change the monitoring settings as needed to refine the log results.

  3. Enter a value in the search field. For example, enter asmith to search for all log entries that contain asmith in the payload.

  4. Press Enter on your keyboard.

The console displays log entries with a payload containing the search value within the specified timeframe and log sources.

Filter log results using a query

You can filter log entries on any field or combination of fields in a payload.

  1. In the Advanced Identity Cloud admin console, go to Monitoring.

  2. Change the monitoring settings as needed to refine the log results.

  3. Click Advanced search.

    log monitoring advanced

  4. Select Any or All to determine what conditions to meet.

  5. Create a rule:

    1. Select the payload field in which to filter. For example, payload/transactionId for a transaction ID.

    2. Select the operator. For example, contains, starts with, or is.

    3. Enter the value on which to filter. For example, 141f7e86f-d2b7-49d3-a2a7-582c08961633/0 (for a transaction ID) or asmith (for a UserID).

  6. To add another rule to the filter query:

    1. Click and click Add Rule.

    2. Repeat step 5.

  7. To add a group to the filter query:

    1. Click and click Add Group.

    2. Repeat steps 4 - 6.

  8. Click Apply.

The console displays log entries matching your filter query.

You can also construct filter queries by clicking Advanced Editor and entering a filter query. You can find some basic examples of filter expressions in Filter log results.

Change the monitoring settings

You can adjust the monitoring settings to display only the logs you’re interested in. Any changes to the settings are automatically saved and will persist in your tenant environment the next time you sign on.

Specify the log sources to monitor

By default, Advanced Identity Cloud displays log entries for am-everything and idm-everything. You can change this setting to show only the log sources you’re interested in.

  1. In the Advanced Identity Cloud admin console, go to Monitoring.

  2. Click Sources and then click settings Choose sources.

  3. Select or deselect the sources to monitor.

  4. Click Save Sources.

Change the timeframe

By default, log entries are displayed for the last 24 hours. You can change this to display a preset or custom timeframe, up to 24 hours.

  1. In the Advanced Identity Cloud admin console, go to Monitoring.

  2. Click the Date range icon and select the required timeframe.

  3. Click Apply.

Change the sort order

By default, Advanced Identity Cloud displays the newest log entries at the top.

  1. In the Advanced Identity Cloud admin console, go to Monitoring.

  2. Click settings View Settings.

  3. Click either Newest on top (the default) or Newest on bottom.

Customize the payload fields shown in the summary

By default, the log event summary displays the source, payload.eventName, and payload.transactionId fields. You can customize the fields displayed and rearrange their order. For example, you might choose to display the payload.userId.

  1. In the Advanced Identity Cloud admin console, go to Monitoring.

  2. Click settings View Settings.

  3. Click Customize Summary Fields

  4. Customize the fields:

    • Select or deselect the fields you want to display in the summary.

    • Rearrange the order of fields by dragging the fields up or down the list.

  5. Click Apply.