---
schema_version: "1"
id: e47fadae51d1c63b6f7fbbc837b7ad9d4e13ee508e3e8df62e0b803499a812d5
title: Tableau Resource Monitoring Tool Security Log Files
collection: tableau
version: current
locale: en-gb
portal_url: https://docs.salesforce.com/tableau/current/en-gb/server/rmt-admin-logs-security.md
canonical_url: https://help.tableau.com/current/server/en-gb/rmt-admin-logs-security.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 0f4f13e3960b2b9f3fcf61eaa1c4a2e8f1babfc0c264061efaf510c578779403
description: Understand security log files generated by the Resource Monitoring Tool on Linux.
---
[Skip to main content](#main-content)

# Tableau Resource Monitoring Tool Security Log Files

Beginning with version 2025.3.4, Tableau Resource Monitoring Tool (RMT) on Linux logs a variety of events that customers may need to track for security compliance. These events include logins, user management (create/update/delete users) and configuration file changes. This logging is enabled automatically and cannot be disabled or turned off.

**Note:** In an effort to align with our company values of Equality, we have changed non-inclusive terminology where possible. Because changing terms in certain places can cause a breaking change, we maintain the existing terminology. So, you may continue to see the terms in CLI commands and options, installation folders, configuration files and other instances. For more information, see [About Tableau Help](https://help.tableau.com/current/tableau/en-gb/about-tableau-help.htm).

## Supported operating systems

Security logging in RMT is on the following operating systems:

- Linux
- Windows

## Security log locations

Security logs are written to sub-folders in these locations:

Linux:

/var/opt/tableau/tabrmt/master/logs/Activity/Security/<folder>

/var/opt/tableau/tabrmt/agent/logs/Activity/Security/<folder>

Windows:

C:\\Program Files\\Tableau\\Tableau Resource Monitoring Tool\\master\\logs\\Activity\\Security\\<folder>

C:\\Program Files\\Tableau\\Tableau Resource Monitoring Tool\\agent\\logs\\Activity\\Security\\<folder>

### Components

<table class="simple-table"><colgroup><col style="width: 13%;"><col style="width: 26%;"></colgroup><thead><tr class="header"><th><p>Security</p></th><th>Description</th></tr></thead><tbody><tr class="odd"><td>Logins</td><td>Logs generated by user sign-in or sign-out.</td></tr><tr class="even"><td>User Management (create/update/delete)</td><td>Logs generated when a user is created, updated or deleted.</td></tr><tr class="odd"><td>rmtadmin commands</td><td><p>Logs generated by any rmtadmin command. Logs are located in folders with names based on the command issued. For example, for <code>rmtadmin cleanup</code> logs would be generated in a folder called <code>rmtadmin_cleanup</code>.</p></td></tr></tbody></table>

## How security logging works

When any of the triggering events occur, an entry is added to one of the security logs. Triggering events that result in a log entry include:

- User logins and log-outs
    
    Any time a user, including admin users, signs in or signs out.
- User management
    
    Any time a user is created, updated or deleted.
- Configuration changes
    
    Any time an action updates the configuration file.

## Who can do this

Resource Monitoring Tool Administrator or a Resource Monitoring Tool user with **Server/Environment Management** role.