Monitor M2M Usage

Last Updated: Oct 14, 2024

Overview

An M2M application has been deployed to a tenant. There is a requirement to:

  • Monitor the usage of M2M tokens
  • View events in the tenant logs that relate to M2M activity

Solution

Follow the video or steps below:

M2M Token Usage Reports

The Machine to Machine Auth report provides a count of access tokens issued for the Client Credentials Flow per calendar month. It can be accessed via the Support Center

  1. Login to the Auth0 dashboard
  2. Scroll down to see the bottom of the menu
  3. Click Get Support : then access the Support Center
  4. From the top horizontal menu select Reports
  5. Select Quota Utilization
  6. In the Feature Consumption section, the panel Machine to Machine Auth provides usage information for the current month
  7. (optional) Click VIEW HISTORY to get M2M usage reports for previous months

NOTE: the Quota Utilization reports on this page are refreshed every 24 hours. This means that M2M token usage figures tend to lag behind actual consumption.

These reports can also be accessed directly from the dashboard.

  1. In the top-left corner of the dashboard, Click the tenant name
  2. Click Quota Utilization

M2M Token activity in Tenant Logs

To view M2M Token activity in the tenant logs:

  1. Login to the Auth0 dashboard
  2. Navigate Monitoring > Logs

Log events that record M2M Token activity are of two types:
seccft : Successful exchange of Access Token for a Client Credentials Grant
feccft : Failed exchange of Access Token for a Client Credentials Grant

NOTE: Refer to Log Events for a complete list of tenant log event codes.

  • Use the query seccft in the search box to discover all successful instances of token issuance
  • Use the query feccft in the search box to discover all failed instances

See the example in the following diagram.

This will show the logs from the last 1, 2, 10 or 30 days, depending on the log retention for the subscription. For further information, refer to Log Data Retention .

NOTE: if there is a requirement to view logs beyond the tenant’s log retention period, then consider use of a Log Streaming service.

Related References