For the complete documentation index, see llms.txt. This page is also available as Markdown.

Traces

Overview

The Traces page gives you visibility into every AI/LLM session initiated by users and agentic applications across your organization. It shows who is prompting which models, how much they're consuming, and lets you drill into individual sessions to see what was actually asked.

From here, you can:

  • Track overall session and token volume across your organization

  • See which users and models are driving the most usage

  • Search and inspect individual sessions, including the topics queried and tokens consumed

Navigate to: Akto Atlas → Agentic AI Discovery → Traces

Summary Cards

The top of the page gives you an at-a-glance view of activity over the selected time range (default: All time, adjustable from the top-right filter).

Card
What it tells you

Total sessions

The total number of traced sessions, broken down by top contributing users

Total tokens

The total tokens consumed across all sessions, split into In (prompt) and Out (completion) tokens

Top Users by tokens

The users consuming the most tokens, ranked highest to lowest

Top Models by sessions

The LLMs seen most often, ranked by number of sessions

Use the All time dropdown in the top-right corner to narrow the summary cards and session list to a specific time window.

Explore Sessions

Below the summary cards, the Sessions table lists every traced session, one row per session. Use the Search sessions bar to filter by keywords found in the session.

Column
What it tells you

Session

A preview of the session's content, such as the initial prompt or payload

User

The user or service account that initiated the session

Model

The LLM used for the session, if identified

Application

The agentic application the session came through (e.g. claudecli, claude_cowork, kirocli)

Traces

The number of individual traces (requests) recorded within the session

Topics Queried

Topic tags automatically classified from the session's content (e.g. Technology, Security)

Tokens in / out

Prompt and completion tokens consumed by the session

Duration

How long the session lasted

Use the Columns panel to add or remove columns from the table, and the Filters panel to narrow the list down, for example, by User, Model, or Application.

Click on a session row to open its full detail, including the complete list of traces recorded within it.

Session Detail

Clicking a session row opens a side panel with two tabs:

The Overview tab summarises the session and visualises the flow of the request.

Field
What it tells you

Traces

The number of individual traces recorded in this session

Total tokens

The combined input and output tokens consumed across the session

Duration

How long the session ran for

Below the summary, a flow diagram shows how the request moved through your environment: User → Application → LLM. Each node identifies the specific user, application, and model involved (the LLM node shows Unknown if the model could not be identified). Use the +/- controls or the fullscreen icon to zoom and pan the diagram.

The Session Details section lists:

Field
What it tells you

User

The user who initiated the session

Application

The agentic application the session came through

Session ID

The unique identifier for the session

Models

The LLM(s) used in the session, if identified

Endpoint ID

A link to the endpoint (device) the session originated from

Topics queried

Topic tags automatically classified from the session's content

Use the Ask anything about this session... box at the bottom of the panel to ask Akto questions about the session directly.

The Traces tab lists every individual trace recorded within the session, shown with its Time, a Trace preview, the Application, and the Model used.

Use Search traces to filter by keyword, and the Columns and Filters panels to customize the view.

Trace Detail

Click on a trace from the Traces tab to drill into that single request/response exchange.

The top of the trace detail shows the Application, Model, User, Duration, and Tokens in / out for that specific trace.

Below that, the LLM card shows the full exchange:

  • INPUT: The complete prompt sent to the model, along with its token count

  • OUTPUT: The model's response, along with its token count

Use the breadcrumb at the top of the panel (e.g. session ID / trace ID) to navigate back to the parent session.

Last updated