Logs & Reports
Files.com maintains detailed audit logs that track file activity, user actions, and administrative operations at the site level. The logs are the complete record of activity on your site and are the primary source for troubleshooting and auditing.
Administrators use logs to investigate issues, understand system behavior, and trace the flow of files across transfers, automations, and integrations. When a process fails or produces unexpected results, the logs show what occurred, when, and where the failure happened.
Logs also serve as an audit trail. Administrators can review who performed each action, how data moved through the system, and when events occurred. This record supports accountability, security investigations, internal controls, and compliance requirements.
A common use is confirming whether a file completed its intended transfer: whether it uploaded successfully, reached a partner, or moved into a target system. The logging system records each stage of the file lifecycle, including when a transfer starts, completes, or fails. You can use this data to confirm delivery status, trace file movement across integrations, and identify the exact point of failure.
The system records events in real time, so administrators can monitor activity as it happens and act immediately when needed.
Logs cover all major system activity and are separated by function: user and file activity, file transfers, remote server synchronization, automations, API requests, inbox activity, shared links, and outbound emails.
Users with administrative permissions can access logs through the web application, APIs, and the CLI.
Available Logs
Each log below tracks activity for a specific service or feature. The sections below match the navigation under Logs & Reports in the web app.
Reports
The Reports page provides downloadable exports for Share Links, Permissions, Login History, Group Membership, and Folder Size data.
File Actions / History
| Log | Description |
|---|---|
| History | Shows site-wide file and folder activity. |
| User Activity | Shows the selected user's activity, including file and folder actions, successful logins, and administrator changes to the account. |
| Folder Activity | Shows file and folder activity performed within the selected folder. |
Protocol Logs
| Log | Description |
|---|---|
| API | Shows a detailed audit log of API requests made to your site. |
| FTP | Shows detailed FTP file transfer activity. |
| SFTP | Shows detailed SFTP file transfer activity. |
| AS2 | Shows inbound and outbound AS2 transmissions between your Files.com site and your AS2 trading partners, including MDN information. |
| WebDAV | Shows detailed WebDAV file transfer activity. |
| Inbound S3 | Shows inbound S3-compatible transfer activity. |
Automation and Flow
| Log | Description |
|---|---|
| Automation Runs | Shows the actions performed by each automation run and their results. |
| Syncs Logs | Shows individual Sync events that occurred as part of scheduled transfers. |
| Sync Runs | Shows each sync execution, its outcome, and a summary of the files transferred. |
| Expectation Incidents | Shows open and resolved incidents generated when an Expectation evaluation fails. |
Email and Notifications
| Log | Description |
|---|---|
| Inbound Emails | Shows emails received by inboxes configured with an email address. |
| Outbound Emails | Shows emails sent by your Files.com site. |
| Webhook Logs | Shows the results of webhook calls made from your Files.com site to other systems. |
Settings Changes
| Log | Description |
|---|---|
| Settings Changes | Shows changes made to site-wide settings and configurations, and changes made to folder settings. |
External Logs
| Log | Description |
|---|---|
| Client Logs | Shows operation logs uploaded by the Files.com CLI App using the --send-logs-to-cloud flag. |
| SSO | Shows LDAP sync operations, LDAP login attempts, and SAML login attempts. |
| User Security | Shows user account lockout events. |
| Pending Work | Shows failures and outcomes from file preprocessing operations such as GPG encryption and decryption. |
| SIEM | Shows the outcome of each attempt to deliver log data to your configured SIEM destination. |
Outbound Connections
| Log | Description |
|---|---|
| Outbound Connections | Shows a detailed audit log of actions performed to your Remote Servers and Files.com on-premise Agents. |
Public Hosting
| Log | Description |
|---|---|
| Public Hosting | Shows all requests to access your publicly served folders. |
Usage Logs
| Log | Description |
|---|---|
| Share Links Usage | Shows download activity for the selected Share Link. Accessed from the Share Link detail page. |
| Inboxes Usage | Shows upload activity and registration details for the selected Inbox. Accessed from the Inbox detail page. |
| Site Usage | Shows a live view of storage, bandwidth, API, and user account utilization across your site. |
Log Access and Delivery Options Using SIEM
In addition to manual review through the Files.com web interface, APIs, and CLI, Files.com supports automated log analysis and processing through multiple delivery methods.
Logs can stream directly to SIEM platforms including Splunk, Microsoft Sentinel, Sumo Logic, Datadog, and New Relic to support monitoring and alerting. Logs can be written to files through Log File Streaming to support batch processing and retention.
These options let logs be consumed in ways that fit operational, security, and compliance workflows.