Timeline of Events

Updated March 18, 2025 16:31

Bernadette Willis

The Fing Timeline of Events feature provides a recent and historical record of all events that ocurred on your network. A network event is any activity or change on your network, for example, users or devices going online or offline. Events related to security and network updates are also displayed and recorded. The Fing Timeline of Events is available on Fing Mobile App, App Controlled Monitoring Unit or Agent, and Fing Web App.

You can also view events in Fing Desktop using different steps. See Show Network Events Using the Fing Desktop at the end of this section.

View the Timeline of Events

Use the Timeline of Events panel or card in the Fing Dashboard to display a summary of recent events--the Timeline is automatically displayed when you launch Fing. You can also select Timeline in the left Navigation Bar on Fing Web App or the Timeline Bar on Fing Mobile App to display a summary of recent network events.

This example shows recent events including an Internet Speed test, a Samsung Galaxy device going offline, and a Router Vulnerability check completed. The summary is helpful in that it provides at-a-glance insight into the most recent activity on your network.

To display a complete list of events and timelines, select View Full Timeline or click the Timeline of Events card on the dashboard. In the example below on Fing App, event information showing status (device online or offline), the IP addresses of the devices, and the time the devices went online or offline is displayed.

You can select the Change Network button on the top right of the dashboard (Fing Web App) or the circular icon (Fing Mobile App) to view recent event activity for other monitored networks.

Timeline of Events - Summary and Expanded View Example on Fing Mobile App

You can also email yourself a spreadsheet of the full list of events. To do this, select Export from the Timeline detail window, and enter your email address when prompted.

Timeline of Events Categories

Events are categorized by these types and you can filter on category types to limit or control what you want to display.

Device Changed State
Device First Joined
People Changed State
Internet Speed Tested
Security Checked
Network Updated

Select the Event Type pull-down menu to view or filter on categories. All events are displayed by default. Continue reading to find out more about each category and event type.

Device Changed State

Events in the Device Changed State category include

Device Going Online shows the time and date a device came back online and the duration it was offline. This example shows the event for a Samsung Galaxy A13 phone coming online on February 5, 2025 at 8:14 after it was offline for 1 hour.

Device Going Offline shows the time and date a device went offline and the duration it was previously online.
Device First Joined shows the time and date a device first joined the network.

Device Joined Autoblock: Device attempting to join network for the first time was autoblocked. Autoblock for new devices must be enabled. You can also unblock the device.
Device Suspended: Indicates a pause in network access has been enabled for this device.

People Changed State

Events in the People Changed State category include

User Arrived/Left: For assigned users, tracks the times that an assigned user's device joins and leaves the network. In this example, the user Miriam joined the network on November 28, 2024 at 7:26 PM and left or stopped connecting on December 2, 2024 at 9:51 pm.

User Suspended: Indicates a pause in network access has been enabled for this user.

Internet Speed Tested

The event category Internet Speed Tested shows the result of an Internet Speed test performed.

Here is an example of an event record of an Internet Speed test showing a download speed of 10.6 Mbps, upload speed of 5.2 Mpbs, latency of 141 ms, and server location in Dublin, Ireland.

Security Check Events

Events related to security include Router Check, New Access Point, Evil Twin, and DeAuth Attack event notifications.

Router Check

Router Check Completed confirms that the router is secure. If open ports are detected, the port numbers are displayed. In this example, router security was verified and no open ports were detected.

New Access Point

The Event New Access Point indicates that a new SSID, BSSID, or channel is detected on the network and indicates if the SSID/BSSID/Channel is part of the known network and alerts you to new or malicious access points.

Evil Twin

The Event Evil Twin indicates if an Evil Twin attack is detected and shows the attacking device name and fraudulent SSID.

DeAuth Attack

The event DeAuth Attack indicates that a WiFi attack has been detected and shows the router name, address and SSID of the attacking device.

Network Update Events

Events about network updates or changes include

Internet Changed: Indicates if a new hostname or IP address was detected.
WiFi Sweet Spot: Shows the router name and speed information for the best average WiFi speed.
Bandwidth Analysis: Shows the bandwidth analysis and duration of the analysis (how long the analysis ran for).
Gateway Changed: Shows the gateway name and address when a new gateway is part of the network trusted gateways.
Network Outage: Indicates a network outage and shows the start time and duration of the outage.
DHCP Outage: Indicates an outage of the DHCP server, and lists the affected devices.
WiFi Radio Monitor: Indicates that a Digital Fence has been detected and lists devices that are part of the digital fence.
Agent: Indicates that the Fing agent or monitoring unit was connected, disconnected or activated on the network for the first time.

Event Summary

Here is a list of all the possible network events reported by Fing and what they mean.

Event Name	Filter Category	What it Shows
Device Online/Offline	Device Changed State	Date and Time device came back online or went offline and duration on or offline.
Device Joined	Device First Joined	Shows time a new device joined the network.
Device Joined Autoblock	Device changed State	Shows if a device attempted to join and was autoblocked.
Device Suspended	Device Changed State	Indicates a pause in network access has been enabled for this device.
User Arrived/Left	People Changed State	Shows when an assigned user joined or left the network.
User Suspended	People Suspended	Indicates a pause in network access has been enabled for this user.
Internet Speed Tested	Internet Speed Tested	Shows download and upload speed, and latency results of an Internet Speed test completed,
Router Check	Security Checked	Checks that the Internet router is secure and shows if there are any open ports.
New Access Point	Security Checked	Shows any new SSID/BSSID/Channels.
Evil Twin	Security Checked	Shows if an evil twin has been detected and device name and fraudelent SSID.
DeAuth Attack	Security Checked	Shows if a DeAuth WiFi attack has occurred, and the name of the router and SSID of the attacking device.
Agent Changed	Network Updated	Fing Agent or Monitoring Unit was connected, disconnected or newly activated.
Internet Changed	Network Updated	A new hostname or IP address was detected.
WiFi Sweetspot	Network Updated	Shows the router name and speed for optimal WiFi performance.
Bandwidth Analysis	Network Updated	Shows the Bandwidth Analysis and duration of the analysis.
Gateway Changed	Network Updated	Shows new or changed Gateway Name and Address.
Network Outage	Network Updated	Shows start and duration of network outage.
DCHP Outage	Network Updated	Shows devices affected by DHCP outage.
WiFi Radio Monitor	Network Updated	Identifies Digital Fence and lists affected devices.

Show Network Events Using the Fing Desktop

To show Events on Fing Desktop, follow these steps:

From Overview, click the Network tab in the left sidebar.
Click the blue View timeline button at the top right of the page. You will get a full log of recent events that happened on your network.
Click any event to see details about it.