For AI agents: the complete documentation index is available at https://www.jumpserver.com/docs/llms.txt, the full documentation bundle is available at https://www.jumpserver.com/docs/llms-full.txt, and this page is available as Markdown at https://www.jumpserver.com/docs/features/audits/reports/user-reports.md.
🎉 JumpServer v5.1.1 is available. See what's new →
  • v5

    • User Reports

    Enterprise Edition

    Audit reports require JumpServer Enterprise Edition. Raw session and log evidence remains available according to your deployment configuration.

    Request 14-day free trial

    User Reports analyzes how users sign in to JumpServer and how their passwords change over time. The report is chart-first: choose a report type, set the time range, and read the overview counters, charts, and ranking tables.

    Open the page from Audits > Report > User Reports.

    Report types

    The left panel lists the available reports for this category:

    • User login report — overview of the user base and sign-in activity, with success and failure trends, login sources, visit-time distribution, and login methods.
    • User change password report — password change totals, a change trend, and rankings of target users and operating users.

    Prerequisites

    • A valid enterprise license. Without a license, the Report area is not available.
    • An audit role with the rbac.view_userloginreport or rbac.view_userchangepasswordreport permission.

    Read the user login report

    1

    Select User login report in the left panel.

    2

    Choose Today, Last 7 days, or Last 30 days.

    3

    Review the Overview counters: total users, MFA not enabled, first login, valid, face vector, and need to update password.

    4

    Read the charts: user login trend (success and failure), login source, visit time distribution, and login method statistics.

    Figure 1: User login report with overview counters and login charts.

    Read the user change password report

    Select User change password report and review the Overview counters for total changes, target users, and operators. The User modification trends chart shows password changes over time, and the ranking tables list the most frequently modified users and the most active operators.

    Field reference

    SectionMetricDescription
    OverviewTotalTotal users in scope.
    OverviewMFA not enabledUsers without an MFA method configured.
    OverviewFirst loginUsers who signed in for the first time in the range.
    OverviewValidUsers whose accounts are valid.
    OverviewFace vectorUsers with facial recognition data enrolled.
    OverviewNeed to update passwordUsers flagged to change their password.
    ChartsUser login trendSuccessful and failed sign-ins over time.
    ChartsLogin sourceDistribution of users by authentication source.
    ChartsVisit time distributionSign-ins grouped into four six-hour periods.
    ChartsLogin method statisticsSign-in volume by authentication method.
    Change passwordTotal / Target user / OperatorNumber of changes, affected users, and distinct operators.
    RankingsModify the target user rankingUsers whose passwords were changed most often.
    RankingsRanking of operating usersUsers or administrators who changed passwords most often.

    Notes

    Note

    Customize controls which charts and tables the report displays, while the range switch controls the reporting period. Compare like-for-like periods when you investigate a change in sign-in volume.