06-13-2018 02:25 PM
Hi, I have done a bit of digging but have trouble finding if there is a way to do this.
I have inherited a client site who use USG for their office firewall; they use PPTP and L2TP based "Road Warrior" VPN connection to the office for some staff to allow remote work for team.
I am being asked if I can generate a report from the VPN server / so that it can be easily reviewed, who logs in when / how often.
- have logs sent to a place that is easy to search
- have logs in plaintext on the on-premise unifi controller server? then I build a small script to harvest / grep out entries of interest, and send out report nightly via email
so far I had a look in web UI, and in the back-end logs. I can't see indication that 'user login events' are logged.
I was able to see in the webUI, when someone was actively logged in / and for how long - but that was about it.
Just curious if there is any way to get at this info.
09-04-2018 05:17 AM
Hi, glad to hear I'm not the only one curious about this :-)
I did find a thread and was able to get a tiny bit of text log CLI based access info on this, as per discussion at
ie, you can see when someone connected and disconnected. The log is not super pretty but it is adequate as a starting point to at least know when a user was in via VPN.
My notes are not 100% complete, so I am partially going from memory here about my findings. I just had this link above saved in my notes for when I looked at this.
09-04-2018 05:24 AM
Hi there Tim,
So glad you are still available! see you posted back in 2014.
I will look into this, it might work. Will test it in a live environment. Guessing you are done with the project?
Thanks for the assisitance.