Diagnose unexpected Active Users

[travis.dixon]

The discrepancy between the "External Active User" counts and the number on the Quota Reports tells me that I need to make some query on the logs API to see a list of the active users contributing to my quota usage.

Auth0 Management API v2 I believe is the place I should be looking, however it’s not immediately obvious to me

1 - how to give it a date range
2 - which log event codes beyond the two mentioned in the above post will contribute to quota usage.

I’m going to have a crack at it using trial and error, but either a pre-baked query or even better something to click on the management interface would make my life a lot easier and probably save me from getting incorrect data and wasting time raising support tickets on bad data

[lihua.zhang]

Hi @travis.dixon ,

Welcome to the Auth0 Community!

1 - how to give it a date range?
You can use such as q: date:[2018-12-18 TO *] to search by date.

2 - which log event codes beyond the two mentioned in the above post will contribute to quota usage?

MAU is only counted for successful authentication attempts. And only sertft
and sepftIt are considered successful login authentication.

You may use q: (type:"sertft" OR type:"sepft") AND date:[2018-12-18 TO *] to find the details.

Ref:

https://www.lucenetutorial.com/lucene-query-syntax.html

Log Search Query Syntax

Hope this helps!