Employee Activity Tracker and Monitoring Reports

Reporting can be used to turn collected remote computer activity into clear historical reports and records.

This feature allows managers to review employee activity with clear searchable records and use the results for follow-up.

Typical use cases include:

• Reviewing employee active and idle time trends.
• Seeing which apps and websites take most work time.
• Reconstructing a clear timeline for incidents.
• Preparing weekly or monthly reports for team leads and HR.
• Using facts during coaching and performance follow-up.

Reporting

Reporting aggregates historical remote computer data into searchable analytics for user activity, application usage, website usage, and keystrokes.

Toolbar and Global Filters

• Refresh loads new records and updates report totals.
• Time range presets include today/yesterday, week/month presets, last 7/14 days, and custom range.
• Filter controls narrow results by computer and user (plus application where relevant).
• Export... saves current report output to file.

Reports

• User activity report: shows when the user was active or idle, plus logon/logoff timeline. Use this report to understand real working time for each employee.
• Application usage report: shows which applications and processes were used most. Use this report to see if employees spend time in approved work software.
• Web browsing report: shows visited websites and full URLs. Use this report to review work-related browsing and identify non-work browsing.
• Keylogger report: shows captured typed text and key sequences. Use this report when you need detailed activity evidence for investigations.

Settings In Each Report

• Enable turns logging on or off for that report type.
• Save configuration persists settings.
• Retention settings can remove old records on remote computers and in local console archive.
• External logger can send report events as JSON to another web address, with an optional header key and value.

External Logger JSON Examples

External logger sends JSON data to your configured URL using HTTP POST and Content-Type: application/json; charset=utf-8. If you set custom header key/value in the UI, that header is also sent. The examples below match the fields used by the application. Each payload also includes computer/session fields such as host, hwid, user, userfullname, ntdomain, terminal, session, ipv4, ipv6, pipv4, and pipv6.

User activity report event

{
  "time": "2026-04-29T08:45:10+02:00",
  "event": "Active",
  "duration": 300,
  "pid": 9152,
  "executable": "OUTLOOK.EXE",
  "name": "Microsoft Outlook",
  "caption": "Inbox - Outlook",
  "update": true,
  "host": "PC-01",
  "user": "j.smith",
  "session": 1
}

Application usage report event

{
  "time": "2026-04-29T09:10:00+02:00",
  "event": "InForeground",
  "pid": 14520,
  "executable": "excel.exe",
  "name": "Microsoft Excel",
  "caption": "Q2 Budget.xlsx - Excel",
  "class": "XLMAIN",
  "cmd": "\"C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE\" \"C:\\Reports\\Q2 Budget.xlsx\"",
  "host": "PC-01",
  "user": "j.smith",
  "session": 1
}

Web browsing report event

{
  "time": "2026-04-29T09:22:14+02:00",
  "event": "Opened",
  "pid": 14520,
  "url": "https://portal.company.com/tickets/12345",
  "title": "Ticket #12345 - Company Portal",
  "browser": "chrome.exe",
  "host": "PC-01",
  "user": "j.smith",
  "session": 1
}

Keylogger report event

{
  "time": "2026-04-29T09:25:51+02:00",
  "pid": 9152,
  "name": "Microsoft Outlook",
  "executable": "OUTLOOK.EXE",
  "class": "rctrl_renwnd32",
  "caption": "New Message - Outlook",
  "keystrokes": "Hello team{{Return}}",
  "host": "PC-01",
  "user": "j.smith",
  "session": 1
}

Some fields are sent only in specific situations (for example duration on close/background events, or update on user-duration updates).

How Reporting Works

• Console downloads logs from connected remote computers into local report storage.
• Report totals and charts are updated from downloaded records.
• Status indicators show when data is loading, processing, or exporting.