Application sessions

The Sessions tab limits session review to one application. Use the global Sessions page when you need to search across applications.

Review the application scope

Confirm the application, date range, and visible result count. Use the available search, filters, and role-specific measures to narrow the list.

A list with no matches may reflect the selected period or filters. Check those first; it does not by itself show that the application stopped reporting. If details are unavailable with your access, work within the evidence your role permits rather than treating the restricted view as an empty result.

Open the evidence

Open a session in Time Machine to review what was recorded. Start with the outcome, then inspect the steps and policy evidence that explain it. Missing detail may be unrecorded or outside your access. Do not fill that gap with an assumed outcome.

Check policy coverage

When sessions are arriving but no non-blocking or enforcement rule evaluated them in the current view, continue to Policy when your role allows it. Check whether a rule covers the application and whether the session contains the fields that rule needs. Test the rule before activating enforcement.

Use actions carefully

Export and review actions appear only when your permissions and the current view support them. Confirm the filtered scope before you apply an action to more than one session.