External Logs cover activity generated outside the core file transfer protocols: CLI operations uploaded from scripted workflows, identity and SSO events, user security events, pending work failures, and SIEM delivery results. Use these logs to audit client-side scripted operations, investigate authentication and provisioning issues, and verify that your security integrations are receiving data.

Logs in This Section

Client Logs record events generated by the Files.com CLI App when it uploads operation logs to your site. Each entry captures the status and detail of a scripted CLI operation run with the --send-logs-to-cloud flag.

SSO Events record SAML login attempts, LDAP login attempts, and LDAP sync operations. Use these to investigate authentication failures and audit login activity across your identity providers.

User Security Events record security-related account activity, currently covering lockout events when an account is locked after too many consecutive failed login attempts.

Pending Work Events record failures from file preprocessing operations such as GPG encryption and decryption applied by a folder setting.

SIEM Events record the outcome of each attempt to deliver log data to your configured SIEM integration. Use these to verify that your SIEM destination is receiving data and to diagnose delivery failures.