Login Success Events
Overview
Login success events show when a user successfully accessed RISE CRM.
What this feature does
They record successful authentication activity and provide context such as user, timestamp, IP address, country, user agent, and device details where available.
Why it is useful
- It helps verify whether a user account was active at a specific time.
- It supports account compromise investigations.
- It helps identify unusual access patterns such as login from a new country or device.
Who should read this?
RISE Admin, Security Officer, System Owner.
Where to find it
Rise Audit Pro → Auth Log, filtered by successful login events.
How to use it
- Open Auth Log.
- Filter by successful login status if available.
- Select a user or date range.
- Review IP, country, and device information.
- Compare with Activity Log if the login is connected to sensitive changes.
Example workflow
An invoice was modified at 11:20 PM. The admin checks successful login events for the same user around that time and compares the IP address with the related activity event.
Screenshot
Screenshot required
Capture from: Rise Audit Pro → Auth Log → Filter Status: Success
Capture from: Rise Audit Pro → Auth Log → Filter Status: Success
Common mistakes
- Assuming a successful login is always safe. It can still be suspicious if the source is unusual.
- Ignoring the relationship between successful logins and later record changes.
- Not reviewing new country or unusual-hour patterns.
Related articles
- New Country Login Detection
- User Agent and Device Data
- Activity Log Overview
