One Identity Safeguard for Privileged Sessions 6.9.2 - Quick Start Guide

Displaying statistics on search results

You can quickly sort and visualize the distribution of the sessions based on their various metadata, for example, username, server address, and so on.

To display statistics on search results

1. Click the icon.

2. Select the type of metadata you want to create statistics on from the Value distribution based on field, for example, select Username to display sessions based on username.

   Figure 19: Search — Displaying statistics

   

3. To exclude items from the pie chart, click the icon next to the metadata you want to exclude.

   For example, if you want to exclude results by a user called testbot, select the icon next to the item.

   Figure 20: Search — Excluding items from the pie chart

   

   The pie chart now does not display results for the excluded item. The percentages always add up to 100%.

   You can continue to restrict or refine your search results and view statistics as required.

Viewing session details

View the session details of each session for in-depth information on each of the indexed session stored in the connection database. You can use it to gain contextual insight about the indexed session and its events.

You can view session details for data recorded by:

• SPS. For more information, see Viewing session details for data recorded by SPS.

• One Identity Safeguard for Privileged Passwords (SPP). For more information, see Viewing session details for data recorded by SPP.

Frequent Item Set (FIS) flow view visuals

Frequent Item Set (FIS) flow view visuals are also available on the Analytics tab. The FIS flow view is similar to the flow view analytics overview, except that the FIS flow view only displays data narrowed down to a single user's previous sessions in the analysis period (which is the previous 90 days by default). For more information, see "Visualizing Frequent Item Sets on the FIS flow view" in the Administration Guide.

Session tags

Session tags allow you to get basic information about the session and its contents at a glance.

Scripted session tag: One Identity Safeguard for Privileged Sessions (SPS) currently supports the scripted session tag. SPS uses One Identity Safeguard for Privileged Analytics to detect if sessions are generated using human interaction or automation. If sessions are generated using automation, SPS displays the scripted tag in the search interface as shown below:

• Scripted sessions are shown on the main search screen.

  Figure 21: Scripted sessions — cards view

  

• Scripted sessions are shown on the Overview tab.

  Figure 22: Scripted sessions — Overview tab