Login Report
The Login Report shows authentication activity across your WiFi network — successful sessions, failed attempts, unique user counts, and peak usage times. Use it to monitor access patterns, investigate security events, and identify capacity bottlenecks.
'alt' => 'Dashboard overview', 'caption' => 'The default Kiwire dashboard layout', 'screenshot' => true, 'class' => '', ]) Drop images into: public/assets/img/docs/{page}/{filename} --}}public/assets/img/docs/report-login/overview.png
What It Shows
The Login Report aggregates login event data and presents it across time, zone, device, and login method dimensions. Both successful authentications and failed attempts are recorded, giving you a complete picture of access activity.
Filters
| Filter | Description |
|---|---|
| Date Range | The time window for login events to include |
| Zone | Filter events from a specific network zone |
| Device / NAS | Filter to events originating from a specific access controller or NAS device |
| Login Method | Filter by authentication method: username/password, Google, Microsoft, voucher, etc. |
| Username | Narrow results to events for a specific user account (supports partial match) |
Charts
- Logins Per Hour Heatmap — A grid of hour × day-of-week cells coloured by login volume. Instantly reveals peak usage windows across the week.
- Daily Login Trend — Bar chart showing total login attempts (successful + failed) per day within the selected date range.
- Login Method Distribution — Donut chart showing the proportion of logins by authentication method.
public/assets/img/docs/report-login/heatmap.png
Key Metrics
| Metric | Description |
|---|---|
| Total Login Attempts | All authentication events (successful and failed) in the period |
| Successful Logins | Events where authentication was accepted and a session was started |
| Failed Logins | Events where authentication was rejected — broken down by reason (wrong password, expired account, inactive, device limit exceeded) |
| Unique Users | Distinct user accounts that logged in at least once during the period |
| Peak Hour | The single hour in the selected period with the highest login volume |
| Peak Day | The single calendar date with the highest total login count |
Recent Login Events Table
Below the charts, a paginated table lists individual login events with full detail:
| Column | Description |
|---|---|
| Timestamp | Date and time of the authentication attempt |
| Username | The account that attempted to authenticate |
| IP Address | Client IP address at the time of login |
| MAC Address | Device MAC address (from the NAS accounting data) |
| Zone | Network zone where the authentication occurred |
| Method | Login method used (password, Google, voucher, etc.) |
| Result | success or failed — failed rows show the rejection reason on hover |
A high failed-login count for a specific username may indicate a user having trouble remembering their credentials — or a brute-force attempt. Cross-reference with the Security Alert log if you see more than 5 failures in quick succession from the same IP.
Export
Click Export CSV to download all login events matching the current filters. The export includes all columns shown in the events table. Large date ranges may produce large files — apply a zone or date filter to limit the output if needed.
Use the Username filter to pull all login events for a specific user when investigating a support request (e.g. "I can't connect"). The events table will show the exact failure reason for each failed attempt.
Required Permissions
view-report-login