Security Analytics Engine 1.1 - Help Desk User Guide

Chatta subito con l'assistenza

Ottieni assistenza in tempo reale
Completa la registrazione

Accedi

Richiedi prezzo

Contatta il supporto vendite

Table of Contents

Administration Web Site Overview

Introduction Launch the Administration web site Web site components

Heading bar Main web pages Navigating the Administration web site Filter data

Auditing

Introduction Auditing page

Filtering options Audit Events table Event Details Download options

Filtering the audit events Displaying details for an individual audit event Downloading audit events information Adding and managing overrides on the Auditing page

Adding a policy override Managing a policy override

Issued Alerts

Introduction Issued Alerts page

Filtering options Issued Alerts table

Filtering the issued alerts

Policy Overrides

Introduction Policy Overrides page Managing overrides on the Policy Overrides page

Auditing

•

Introduction

•

Auditing page

•

Filtering the audit events

•

Displaying details for an individual audit event

•

Downloading audit events information

•

Adding and managing overrides on the Auditing page

Introduction

When a user is unable to log in to an application due to a high risk score, the help desk operator is able to create an override to allow them access. This is done by locating the audit event and creating an override for the user that will allow them to access Security Analytics Engine protected applications for a specified period of time.

Auditing page

The Auditing page is displayed when Auditing is clicked on the Reports page of the Security Analytics Engine Administration web site.

The Auditing page displays a list of the events for the applications currently utilizing the Security Analytics Engine. These results are filtered using the fields located at the top of the page.

Filtering options

The following are the filtering options at the top of the Auditing page:


	NOTE: Refreshing the screen returns the Auditing page to its default settings.

From

This field specifies the date to start searching for events. By default, this is the current date. Click anywhere in the field to display a calendar from which to select a date to start searching for events. You can also manually edit the date in the field (mm/dd/yyyy).

This field specifies a date to stop searching for events. By default, this is the current date. Click anywhere in the field to display a calendar from which to select a date to stop searching for events. You can also manually edit the date in the field (mm/dd/yyyy).

Application(s)

This drop-down list displays the currently configured applications. Select to display auditing information for all applications or a specific application. By default, auditing events for all applications are displayed.

Max Records

This field is used for setting the maximum number of records (1-10000) to return for the search. By default, this is 1000 records.

The Search button updates the Audit Events table located beneath the filtering options.

For more information on the above filtering options, see To filter audit events. For information on filtering individual columns, see To filter data.

Seleziona il prodotto:

Per una maggiore efficacia, compilare l'Obiettivo della chat:

Soluzioni consigliate per il problema

Security Analytics Engine 1.1 - Help Desk User Guide

Auditing

Introduction

Auditing page

Filtering options