> For the complete documentation index, see [llms.txt](https://enterprise.hideez.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://enterprise.hideez.com/hideez-enterprise-server/audit/workstation-events.md).

# Workstation events

Go to the corresponding section “**Audit - Events**” to view Workstations Events&#x20;

![](/files/NS0T4ytFC5FThamoO2oe)

Types of events in the system that are logged:

* Service Started / Stopped&#x20;
* Device Connect / Disconnect
* Device Deleted
* HES Connected / Disconnected&#x20;
* Dongle Plugged / Unplugged
* Credentials Updated&#x20;
* Computer Logon - computer is logged in\
  \&#xNAN;*The Note column displays:*\
  *Dongle - dongle tap*\
  *Proximity - according to Bluetooth signal strength*\
  *NonHideez is another way of locking. Usually, it is a password entered manually.*
* Computer Unlock - computer is unlocked\
  \&#xNAN;*The Note column displays:*\
  *Dongle - dongle tap*\
  *Proximity - according to Bluetooth signal strength*\
  *NonHideez is another way of unlocking. Usually, it is a password entered manually.*
* Computer Logoff (Note: Proximity, Button, Non-Hideez) - computer is logged out (note: using proximity / pressing a button / without Hideez)
* Computer Lock - computer is locked\
  \&#xNAN;*NonHideez - another way of locking. This is usually a combination of Win + L or shutting down the computer.*\
  *DeviceBelowThreshold - the Bluetooth signal strength fell below the lock level and lasted for more than N seconds (30% и 5 sec by default)*\
  *DeviceConnectionLost - the Bluetooth connection with the key broke off. There is no difference between the disconnection initiated by the Bluetooth protocol or by a button in the client. It appears more often than DeviceBelowThreshold due to the current default settings.*\
  *ProximityTimeout - the connection is stable, but the key did not send data about its RSSI for N seconds (N = double time until disconnected by proximity). It will only appear if there are any errors in the firmware or in the client.*
* Low Battery (Note: actual battery value)
* Remote Connect/Disconnect&#x20;
* Software Update (Note: the version of the new application)&#x20;
* Credentials Used (Note: name of the application where the credentials were used)&#x20;

Log table fields:

* Date - Date and time of the event
* Event - type of event
* Status - status (ok, error, warning, information)
* Note - note to capture additional information about the event
* Computer - computer name
* User Session - the name of the user account if the computer was unlocked during the event, NA if the computer is locked
* Device SN - device serial number
* Employee - the name of the employee specified on the HES server
* Company & Department - company and employee department
* Account Name - the name of the account used
* Account Type - account type (personal or general)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://enterprise.hideez.com/hideez-enterprise-server/audit/workstation-events.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
