Regarding Bot Detection under Attack Protection

[achandran]

If we implement Bot Detection, how is this logged internally within Auth0 and how do we know when all was this Bot detection feature activated if we set it up on “When Risky”
If we use the Google reCaptcha will their be any monitoring available?

[rueben.tiow]

Hi @achandran,

Thanks for reaching out to the Auth0 Community!

@achandran

If we implement Bot Detection, how is this logged internally within Auth0 and how do we know when all was this Bot detection feature activated if we set it up on “When Risky”

After switching on the Enable tenant logs for Risk Assessment in your Bot Detection settings, you can find the corresponding pla log event type in your tenant logs, which captures a Pre-Login Assessment and helps in monitoring the behavior of bot detection without having to enable it.

Meaning that if you have the Enable tenant logs for Risk Assessment switched on, then you will see the pla logs regardless of whether you set your Bot Detection to "Never’, “When Risky”, or “Always”.

I hope this answers your questions!

Please feel free to reach out if you have any additional questions.

Thanks,
Rueben