Viewing Security Events in Mixpanel: User Activity Post-Login
Hi Team, Can you point me how to view security events in Mixpanel in terms of what users did post the login history in terms of objects accessed and exported any events etc?
Hi Team, Can you point me how to view security events in Mixpanel in terms of what users did post the login history in terms of objects accessed and exported any events etc?
Hi Agam j., Please stand by as I search the Mixpanel knowledge base for an AI-powered answer. I normally take about 15 seconds or so. In case AI cannot answer your question, feel free to reach out to Mixpanel support at mixpanel.com/get-support. If you have follow-up questions for this thread, please tag me again with your question: @kapa.ai <follow-up question> 👋
Feel free to ask a follow-up question once I've answered by mentioning me with @kapa.ai
To view security events in Mixpanel—such as what users did after logging in, including objects accessed and events like exports—you can use a combination of Mixpanel’s reporting and analysis tools: 1. Flows Report:
Use the Flows report to visualize the paths users take after a specific event, such as "login." This will show you the sequence of actions users perform post-login, including accessing objects or triggering export events. You can anchor the flow on the "login" event and add steps to see subsequent actions. The Flows report allows you to expand the number of steps and view more events beyond the top three by right-clicking the "Other events" node and adding more rows of events. This helps you identify what users typically do after logging in, including any security-relevant actions like data exports or object access events.
See more about Flows2. Funnels Report with "View as Flow":
You can build a funnel starting with the "login" event and add steps for key security events (e.g., "object accessed," "data exported"). Then, use the "View as Flow" feature on any funnel step to see what users did before or after that step, helping you understand the context of security-related actions.
Funnels Advanced Concepts3. JQL (JavaScript Query Language) for Custom Analysis:
For more advanced or granular analysis, you can use JQL’s groupByUser() function to programmatically analyze what events users perform after a "login" event. For example, you can write a JQL query to compute the frequency of each event that occurs after a "login" for each user.
return Events({
from_date: "YYYY-MM-DD",
to_date: "YYYY-MM-DD"
})
.groupByUser(function(state, events) {
state = state || { distribution: {} };
if (events.length == 0) {
return state;
}
for (var i = 0; i < events.length - 1; ++i) {
if (events[i].name == "login") {
state.distribution[events[i + 1].name] =
state.distribution[events[i + 1].name] || 0;
++state.distribution[events[i + 1].name];
}
}
if (state.last_event_login) {
state.distribution[events[0].name] =
state.distribution[events[0].name] || 0;
++state.distribution[events[0].name];
}
if (events[events.length - 1].name == "login") {
state.last_event_login = true;
}
return state;
});
}
```LBKS <https://docs.mixpanel.com/docs/reports/apps/jql#groupbyuseroptional-additional-keys-reducer-functions|JQL groupByUser documentation>LBKS4. **Events Report**:
You can use the Events report to filter and review raw event data, including properties such as the object accessed or export actions. This allows you to inspect individual events and their properties for security auditing. Events ReportTip: Make sure your implementation is tracking the relevant security events (e.g., "object_accessed", "data_exported") with appropriate properties (such as object name, export type, etc.) so you can analyze them effectively in Mixpanel.If you need to export this data, you can use the Raw Event Export API to extract event data for further analysis or compliance purposes. Export MethodsIf you need more specific guidance on setting up these reports or queries, please provide details about your event naming and properties.
kapa.ai is still learning and improving, please let me know how I did by reacting below.
ℹ️ Tip: Mention @kapa.ai in the thread for follow-ups or DM the app for 1-to-1 help.
No, still need the steps