
The Session Events page is where you review every event that makes up a single session, in detail. You reach it by drilling into a session from the Sessions page, and it lays out that session's events one row at a time so you can work through what was said, what was detected, and what was done at each step of the interaction. A Session Summary button at the top of the page takes you back to the Session details panel when you want to return to the session-level view. The active use case is show in the top right.
Reading the Event Table
The event table displays one row per event in the session. It is the surface for working through a session event by event: scanning for the events that show risk, then reading any one of them in full. The table is highly configurable, so most reviewers work with a subset of columns suited to what they are looking for. The columns fall into a few groups based on what they tell you.
By default, a core set of columns is show and the rest are hidden. You can enable of disable any column, reorder the visible ones, and save named layouts. The table below lists which columns are shown out of the box and which are hidden until you add them.

Identifying an Event
These columns tell you what an event is and where it came from.
- ID and Time: The event ID and the timestamp.
- Event Source: The actor or component that initiated the event.
- Event Target: The actor or component that received the event.
- Sender: The actor that sent the event.
- Receiver: The actor that received the event.
- User: The user associated with the event.
- Use Case: The use case the event belongs to.
- Profile: The profile that evaluated the event.
Assessing Risk and Outcome
These columns surface whether an event raised any concerns and what was done about it. They are the ones to scan first when working through a session.
- Indicator: A red line if the event has Safety or Security alerts. The column is empty when there are none.
- Safety: A green check mark when there are no Safety alerts, or the count of alerts when there are.
- Security: A green check mark when there are no Security alerts, or the count of alerts when there are.
- Input Action: The action taken on the input: blocked, modified, or none.
- Output Action: The action taken on the output: blocked, modified, or none.
Reviewing Content
These columns show what was actually said and what was detected in it.
- Input: The input content of the event.
- Output: The output content of the event.
- Input and Output: The input and output content shown together.
- Intent: The detected intent of the event.
- Sentiment: The detected sentiment of the event.
Timing and Processing
These columns report how long the event took to handle and how large it was.
- Input Analysis Duration: The time spent analyzing the input.
- Output Analysis: The time spent analyzing the output.
- LLM Duration: The time spent on the model call.
- Input Token Count: The number of tokens in the input.
- Output Token Count: The number of tokens in the output.
Collecting and Bookmarking Events
These columns are controls rather than event data.
- Selector: A checkbox for selecting events. Selected events can be copied to a collection with the Collections button.
- Bookmark: Whether the event is bookmarked.
Filtering
The filter panel narrows the table to the events you want. It offers four categories of filter:
- Selectors: Use Case and Profile. The Use Case selector is single select, so the table always shows one use case at a time. Changing it swaps which use case's events are displayed.
- Time Range: A From and To window.
- Input and Output: Actions, Categories, and Signals, applied to the input, the output, or both.
- Sentiment: The detected sentiment.
Filters can be saved as named present, then loaded or deleted from the filter panel.
Collections Mode
Collections mode is accessible from the toolbar. When it is active, a Collections column appears, and events can be selected and copied to a collection using the Copy to Collections button. A collection gathers events together so they can be processed in bulk through Cannon.
Table Settings
Table settings control how the table is displayed. You can enable or disable columns, drag to reorder the visible columns, save named layouts, and set how many rows appear per page. Rows per page accepts a value from 1 to 500.
