How can I see when a user has last logged in to Panther?
There are three ways to achieve this:
The first way to see when a user last logged in to the Panther Console is to navigate to Settings (the Gear icon) -> Users. There you'll see a table containing all the users of your Panther Console. There is a column named "LAST LOGIN" which displays when the user last logged in to the Panther Console.
You can use our Panther API for User & Role Management and execute a query to list the users similar to the one below. The information regarding when the user last logged in will be depicted in the field lastLoggedInAt.
query users {
users {
id
givenName
familyName
email
status
createdAt
lastLoggedInAt
role {
name
id
permissions
}
}
}
You can navigate to Data Explorer and run a query to the table panther_logs.public.panther_audit
using actionname = 'SIGN_IN' and actor = 'THE_USERNAME'
among the rest of the desired qualifications.
Please note that the Panther Audit Logs will have to be enabled in your Panther Instance in order for this query to work. If the audit logs are not currently enabled, you can check the steps that are described in the article📄 How do I enable Audit Logs in my Panther Console?