The enhanced audit event payloads: the general structure common to every event, the authentication types, and the per-category event data for user management, objects, diagramming, narrative, security, settings, roles, and groups.
On-premises installations write the full set of audit events to local JSONL log files under the base directory, for SIEM ingestion, compliance retention, and forensics.
The Administration Support page: download a support ZIP with log files for iGrafx Support, and turn on login audit tracking to see who is using the platform.