Centralized Log Aggregation and Retention

Thinfinity® Workspace allows the consolidation of logs from multiple components (Gateways, Brokers, Agents) into a single source, streamlining analysis and ensuring complete traceability of user access and actions.

Logs can be stored in accordance with internal policies or compliance requirements.

Security and Operational Benefits

Incident Detection: Monitor suspicious patterns in real time or through historical analysis.
Internal Auditing: Clear visibility into who accessed what, when, from where, and how.
Resilience and Rapid Response: Enables event correlation in case of incidents or failures.
Compliance Evidence: Tangible proof for security audits or certification processes.

Technical Features

Structured logs with detailed information (timestamp, IP, user, resource, action).
Export of audit data in CSV or JSON from the Analytics module.
Filtering and search options to facilitate investigations.
Compatible with distributed and multi-tenant deployments.

Interpreting the rdpb_userid field

In the gateway’s trace files, the UserName column holds the user the Broker authorized for the session, when one is known. When the UserFromCookie column reads True, UserName comes instead from the browser’s rdpb_userid cookie, a value the client sets and nothing validates — a convenience label for grouping events by requester, not an identity. Enterprise Logger records written by [Gateway]Metrics.Traces.Websockets.ToELog name the rdpb_userid value as their actor, not the user the Broker authorized. For audit workflows that require authoritative user identity, correlate traces and records with authenticated session data from the Audit Log.

Typical Use Cases

Companies with regulatory audit requirements.
Financial, healthcare, or government environments.
Distributed architectures that require centralized visibility.