Occurrences by credential
- 2 minutes to read
- Print
- DarkLight
- PDF
Occurrences by credential
- 2 minutes to read
- Print
- DarkLight
- PDF
Article summary
Did you find this summary helpful?
Thank you for your feedback
In this document, you’ll find detailed information about the Occurrences by credential screen, which displays a report ranking sessions based on audited commands executed and the credentials used.
Path to access
- On senhasegura, in the upper-left corner, click the Grid Menu, represented by the nine squares, and select Behavior.
- In the side menu, select Audited command logs > Occurrences by credential.
Top bar
| Item | Description |
|---|---|
| Show filters | Represented by the magnifying glass icon, it displays or hides the search fields on the screen. |
| Update | Represented by the counterclockwise arrow icon, it refreshes the page. |
| View actions | Represented by the three vertical dots icon, it displays a drop-down menu with possible actions for the report. |
| Print report | Represented by the printer icon, it opens a new page for printing the report. |
| Export CSV | Represented by the paper sheet icon, it downloads the report. |
| Schedule report | Represented by the clock icon, it opens the Schedule report screen. |
Search fields
| Item | Description |
|---|---|
| Command | Drop-down menu that filters commands by their name. The downward arrow opens a list of active commands. Clear the field to enable the All option. |
| Action of session | Drop-down menu that filters commands by the action executed according to the audited command record. The available options are Allow, Lock, Interrupt, and Force. Clear the field to enable the All option. |
| Remote device | Text field that filters commands by the command’s target-device. |
| Credential | Text field that filters commands by the credential used. |
| Session start | Field that filters commands by the session date. Use this field to enter the start date of the period. Format MM/DD/YYYY. The downward arrow opens a calendar for selecting the desired date. If the Time field is enabled, use it to enter the start time of the interval. |
| until | Field that filters commands by the session date. Use this field to enter the final date of the period. Format MM/DD/YYYY. The downward arrow opens a calendar for selecting the desired date. If the Time field is enabled, use it to enter the end time of the interval. |
Report fields
- Command.
- Action during session.
- Remote device.
- Credential.
- Sessions: number of sessions in which this command was executed.
- Action: in this column, you access:
- View credenitla history: represented by the magnifying glass icon, it opens the Sessions with occurrences detected screen.
Info
The report displays 30 records per page. To go to the next screen, click the forward button at the end of the report.
Was this article helpful?
