Chat now with support
Chat with Support

One Identity Safeguard for Privileged Sessions 6.0.11 - Administration Guide

Preface Introduction The concepts of One Identity Safeguard for Privileged Sessions (SPS) Cloud deployment considerations The Welcome Wizard and the first login Basic settings
Supported web browsers and operating systems The structure of the web interface Network settings Configuring date and time System logging, SNMP and e-mail alerts Configuring system monitoring on SPS Data and configuration backups Archiving and cleanup Forwarding data to third-party systems Joining to One Identity Starling
User management and access control Managing One Identity Safeguard for Privileged Sessions (SPS)
Controlling One Identity Safeguard for Privileged Sessions (SPS): reboot, shutdown Managing Safeguard for Privileged Sessions (SPS) clusters Managing a high availability One Identity Safeguard for Privileged Sessions (SPS) cluster Upgrading One Identity Safeguard for Privileged Sessions (SPS) Managing the One Identity Safeguard for Privileged Sessions (SPS) license Accessing the One Identity Safeguard for Privileged Sessions (SPS) console Sealed mode Out-of-band management of One Identity Safeguard for Privileged Sessions (SPS) Managing the certificates used on One Identity Safeguard for Privileged Sessions (SPS)
General connection settings HTTP-specific settings ICA-specific settings RDP-specific settings SSH-specific settings Telnet-specific settings VMware Horizon View connections VNC-specific settings Indexing audit trails Using the Search interface Searching session data on a central node in a cluster Advanced authentication and authorization techniques Reports The One Identity Safeguard for Privileged Sessions (SPS) RPC API The One Identity Safeguard for Privileged Sessions (SPS) REST API One Identity Safeguard for Privileged Sessions (SPS) scenarios Troubleshooting One Identity Safeguard for Privileged Sessions (SPS) Using SPS with SPP Configuring external devices Using SCP with agent-forwarding Security checklist for configuring One Identity Safeguard for Privileged Sessions (SPS) Jumplists for in-product help LDAP user and group resolution in SPS Appendix: Deprecated features Glossary

The events table

 NOTE:

The structure of these database tables may change in future One Identity Safeguard for Privileged Sessions (SPS) versions.

Table 22: Columns of the events table
Column Type Description
id integer The unique ID number of the entry.
channel_id integer The ID of the channel. This value is actually a reference to the id column of the channels table.
printable boolean Returns FALSE if text contains control characters or characters that do not have any output or control function at all.
time timestamp The time when the command was executed.
record_id bigint The identifier of the event within the audit trail (.zat file).
type adp_type

The type of the event. Possible values:

  • adp.event.command: The command entered in SSH or Telnet.

  • adp.event.screen.content: Screen content.

  • adp.event.screen.creditcard: Credit card numbers detected. Displayed only in the alert table, not visible in the Event field.

  • adp.event.screen.windowtitle: The title of the window in graphic protocols (RDP only).

event text The screen content, command, or window title that was detected.

The file_xfer table

This table contains information about the files transferred the connections.

 NOTE:

The structure of these database tables may change in future One Identity Safeguard for Privileged Sessions (SPS) versions.

Table 23: Columns of the file_xfer table
Column Type Description
channel_id integer This value is a reference to the ID of the channels table where the file transfer occurred.
details text The detailed description of the file transfer. The exact contents of this field depend on the protocol used for the file transfer.
event text The type of the file operation that occurred, for example, Create file.
filename text The name of the file affected by the file operation.
path text

SCP path: Name and path of the file copied via SCP. Available only for SCP sessions (Session exec SCP SSH channels) if the Log file transfers to database option is enabled in the Channel Policy of the connection.

id integer The unique ID of the entry
start_time integer

Start time: Date when the channel was started.

The http_req_resp_pair table

This table contains information about the requests and responses in HTTP and HTTPS sessions.

 NOTE:

The structure of these database tables may change in future One Identity Safeguard for Privileged Sessions (SPS) versions.

Table 24: Columns of the http_req_resp_pair table
Column Type Description
id integer The unique ID of the entry.
url text The URL of the HTTP request.
channel_id integer The ID of the channel. This value is actually a reference to the id column of the channels table.
response_code text The status code of the HTTP response.
request_time integer Unix timestamp indicating when the request has been received.

The indexer_jobs table

 NOTE:

The structure of these database tables may change in future One Identity Safeguard for Privileged Sessions (SPS) versions.

Table 25: Columns of the indexer_jobs table
Column Type Description
audit_trail_id integer Identifies the audit trail using the _connection_channel_id of the channel for which the indexing job was created.
id integer The unique ID of the entry.
indexer_adp_version text The version number of the ADP component of the indexer service.
indexer_cpu_time integer The duration of the indexing (CPU time), in millisecond.
indexer_duration integer The duration of the indexing (actual time), in millisecond.
indexer_start_time timestamp Time when the indexing started.
indexer_version text The version number of the indexer service.
job_id text The unique ID of the indexing job, used by components of the indexing service during indexing only.
error_message text The error message of the indexer job.
trail_is_archived boolean The value is true if the trail is already archived.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating