How can I see when a user has last logged in to Panther?

QUESTION

How can I see when a user has last logged in to Panther?

ANSWER

There are three ways to achieve this:

• The first way to see when a user last logged in to the Panther Console is to navigate to Settings (the Gear icon) -> Users. There you'll see a table containing all the users of your Panther Console. There is a column named "LAST LOGIN" which displays when the user last logged in to the Panther Console.
• You can use our Panther API for User & Role Management and execute a query to list the users similar to the one below. The information regarding when the user last logged in will be depicted in the field lastLoggedInAt.
query users {
  users {
    id
    givenName
    familyName
    email
    status
    createdAt
    lastLoggedInAt
    role {
      name
      id
      permissions
    }
  }
}
  • You can navigate to Data Explorer and run a query to the table panther_logs.public.panther_audit using actionname = 'SIGN_IN' and actor = 'THE_USERNAME'among the rest of the desired qualifications.
    
    Please note that the Panther Audit Logs will have to be enabled in your Panther Instance in order for this query to work. If the audit logs are not currently enabled, you can check the steps that are described in the article How do I enable Audit Logs in my Panther Console?.