Smart Access Control Event Log

This dataset provides a detailed log of smart building access control events, capturing user identities, access points, event types, and security actions. It supports anomaly detection, remote security operations, and compliance auditing, making it ideal for facility managers and cybersecurity teams seeking to optimize physical asset protection and investigate unauthorized access attempts.

  • last updated 24 Dec 2025
  • by GoMask
The brief that made it

Detection and investigation of unauthorized access attempts

Sample rows

preview · 8 of 120 rows · all 18 columns
event_idstringuser_rolestringanomaly_flagbooleanasset_typestringtimestampdatetimeuser_idstringuser_namestringaccess_point_idstringaccess_point_locationstringaccess_methodstringevent_typestringevent_reasonstringasset_idstringcompliance_flagbooleanremote_access_flagbooleanaudit_trail_idstringsecurity_action_takenstringnotesstring
SRV-20240601-AB12employeefalseoffice2024-06-01T08:14:22ZU1001Elena DuarteDOOR-OFC-01Main Office Entrancerfid_cardaccess_grantedRFID match - entry authorizedOFC-01truefalseAUD-936252blankRoutine entry during business hours
VIS-20240601-001visitorfalseblank2024-06-01T09:07:06ZVIS-104blankGATE-PARK-02South Parking Gatepinaccess_deniedInvalid PIN enteredblankfalsefalseAUD-815203blankPIN entered incorrectly three times
C-20240601-021contractorfalseserver_room2024-06-01T07:41:14ZC-2071Yusuf MalikSRV-RM2Server Room 2biometricaccess_grantedBiometric match - contractor accessSRV-02truefalseAUD-116237blankEarly morning maintenance window
ADMIN-20240601-88adminfalselab2024-06-01T05:59:50ZADMIN005Katherine ShawLAB-DOOR-1Chemistry Lab Westbiometricsystem_overrideAdmin override for scheduled patchLAB-01truefalseAUD-502901blankOverride for security patch deployment
SEC-20240601-01securitytrueserver_room2024-06-01T02:11:33ZS-SEC03Miguel TorresSRV-RM1Server Room 1manual_overrideforced_entryForced open alarm detected by systemSRV-01falsefalseAUD-721164Security dispatched to investigate forced entryEmergency protocol initiated
VIS-20240601-002visitorfalseblank2024-06-01T12:25:19ZVIS-120blankGATE-PARK-03East Parking Gatepinaccess_deniedExpired visitor passblankfalsefalseAUD-008236blankVisitor pass expired
U1002-20240601employeefalseoffice2024-06-01T07:56:44ZU1002Alexis WalkerDOOR-OFC-02Main Office Rearrfid_cardaccess_grantedRFID match - entry authorizedOFC-02falsefalseblankblankRoutine entry
C-20240601-043contractorfalselab2024-06-01T10:18:33ZC-2098Marta IvanovaLAB-DOOR-2Physics Lab Northmobile_appaccess_grantedMobile credential matchedLAB-02truetrueAUD-652219blankRemote entry for maintenance

What the 120 rows show

from the 120-row sample

Security (user role) stands out: 19 of its 20 rows have anomaly_flag = true, against 9 of 100 for the rest.

  • 23%anomaly_flag = true
  • 6access methods
  • 6event types
Anomaly flag rate by user_roleanomaly_flag = true
0%50%100%0%employ…0 of 414%contra…1 of 2830%visitor6 of 2018%admin2 of 1195%securi…19 of 20
asset_type93 rows with a value · 27 left blank
  1. server_room26
  2. office25
  3. lab21
  4. warehouse12
  5. parking9
18 columns by typefrom the column list below
  • string 14
  • datetime 1
  • boolean 3

Columns

18 columns in three groups
blueprint · 18 columns
columntypedescriptionexample
Text 14 columns
event_idstringUnique identifier for each access control eventuniqueSRV-20240601-AB12
user_idstringUnique identifier for the user attempting accessU1001
user_namestringFull name of the user attempting accessoptionalElena Duarte
user_rolestringRole or designation of the user (e.g., employee, contractor, visitor)6 values · optionalemployee
access_point_idstringUnique identifier for the physical access point (e.g., door, gate, turnstile)DOOR-OFC-01
access_point_locationstringPhysical location or description of the access pointoptionalMain Office Entrance
access_methodstringMethod used for access (e.g., RFID card, PIN, biometric, mobile app)6 valuesrfid_card
event_typestringType of event (e.g., access_granted, access_denied, forced_entry, door_held_open)7 valuesaccess_granted
event_reasonstringReason or system message for the event (e.g., invalid credential, expired access, successful authentication)optionalInvalid PIN entered
asset_idstringUnique identifier for the protected physical asset or areaoptionalOFC-01
asset_typestringType of asset being protected (e.g., server room, office, warehouse)6 values · optionaloffice
audit_trail_idstringIdentifier for the related audit trail recordoptionalAUD-936252
security_action_takenstringAction taken by security personnel or system in response to the eventoptionalLab lockdown initiated
notesstringAdditional notes or comments about the eventoptionalVisitor pass expired
Dates and times 1 column
timestampdatetimeDate and time when the access event occurred (UTC)2024-06-01T08:14:22Z
True or false 3 columns
compliance_flagbooleanIndicates if the event is relevant to compliance monitoring (true/false)optionaltrue
remote_access_flagbooleanIndicates if the access attempt was initiated remotelyoptionalfalse
anomaly_flagbooleanIndicates if the event was flagged as anomalous by the systemoptionalfalse

Use it for

  • anomaly flag23%28 of 120 rowsanomaly flag by user …0%empl…4%cont…30%visi…18%admin

    A technology dashboard

    The anomaly_flag rate, anomaly_flag by user_role and a breakdown of asset_type. Excel, Power BI or Tableau.

  • Why do 28 of 120 rows have anomaly_flag = true?

    A root-cause class exercise

    Hand out the rows and one question. The answer is in the data, not in the brief.

  • A software demo

    Believable events with timestamp, user_id and user_name to fill a screen in front of a buyer.

Not quite right?

Make it yours.

Same 18 columns, your size and your rules. See 20 rows before you pay.

Preview 20 rows free

1,000 rows: $1.99 · 10,000: $12.99One-time. No subscription. All prices

This dataset120 rows18 columns
Yours1,000 rows18 columnsaccess_point_location: UK only

blueprint · smart-access-control-event-log

Behind this dataset

Same schema. As many rows as you need.

These 120 rows came out of a blueprint — 18 columns with generation rules behind each one. Open it in Data Factory to retune a column, add your own, wire in foreign keys, and run it at the size you actually need.

Rules it was built with
  • Each event must record timestamp, access point ID, and user credential type.
  • Unusual access events (e.g., repeated failed attempts, off-hours access) are flagged for review.
  • Only registered users or maintenance staff can access secure areas.
  • Events with missing location or credential data are excluded.
  • Multi-factor authentication events are tagged separately.
  • Access granted and denied events are clearly differentiated.
Rows
Open the blueprint in Data Factory

1 credit per row. Preview 20 rows free. Buy rows for the full run.

Exports
CSV, JSON, JSONL, Parquet, SQL, Excel, TSV, XML
Licence
yours to use, including commercially
API slug
smart-access-control-event-log

What should your data show?

Preview 20 rows free
No signup. No card.