USER_LOGIN_V View
This view provides raw historic data about user login/logout activity.
Lacework regularly monitors for user login/logout activity in your environment and returns a row in the USER_LOGIN_V view when Lacework detects a user login/logout activity.
Each row contains user login/logoff information as listed in the columns.
| Column Name | Data Type | Description |
|---|---|---|
| CREATED_TIME | Timestamp | The time and date when the login or logout was detected by Lacework. |
| MID | Number | The Lacework-generated machine identifier for the system that is being logged into or logged out of. |
| ACTIVITY_TIME | Timestamp | The time and date when the user logs in or logs out. |
| ACTIVITY_TYPE | Text (Login or Logoff) | The user activity type, either the string Login or Logout. |
| USERNAME | Text | The username of the user that logged in or logged out. |
| UID | Number | The Linux unique identifier associated with the user on this machine. |
| SOURCE_IP_ADDR | Text | The IP address of the system where the login is originating from. |