Chat now with support
Chat with Support

One Identity Safeguard for Privileged Passwords 7.0.5 LTS - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Home Privileged access requests Appliance Management
Appliance Backup and Retention Certificates Cluster Enable or Disable Services External Integration Real-Time Reports Safeguard Access Appliance Management Settings
Asset Management
Account Automation Accounts Assets Partitions Discovery Profiles Tags Registered Connectors Custom platforms
Security Policy Management
Access Request Activity Account Groups Application to Application Cloud Assistant Asset Groups Entitlements Linked Accounts User Groups Security Policy Settings
User Management Reports Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP and SPS join guidance Appendix C: Regular Expressions About us

Activity Center

The Activity Center is the place to go to view the details of specific events or user activity. The appliance records all activities performed within One Identity Safeguard for Privileged Passwords. Any administrator has access to the audit log information; however, your administrator permission set determines what audit data you can access. For more information, see Administrator permissions.

The Activity Center page contains these options:

  • Select a Saved Search: Allows you to access and manage previously saved search and scheduled reports.
  • Save or Schedule Search: Saves the current search criteria which can be used later to generate the report. For more information, see Saving search criteria and loading previously saved search criteria.
  • Clear Search Criteria: Resets the current search criteria back to the default settings (all activity occurring within the last 24 hours).
  • Activity Category: Use this drop-down to filter the activity being searched for based on category. Selecting All Activity will search all categories.
  • Date Range: Use this drop-down to specify a time frame for the search.

Use the available search fields to specify additional query criteria to retrieve the information you are looking for. For more information, see Applying search criteria.

Activity Center: Results toolbar

Once an activity audit log report is generated, the results section contains the search results grid and these toolbar options:

  • View Details: After selecting a result, click this button to view the details.
  • Request Workflow Details: After selecting a result related to an access request, click this button to open a detail of all actions for that request (for example: approvals, password checkouts, and session logs).
  • Export: Select to create a .csv or .json file of the criteria displayed and save it to a location of your choice.
  • Refresh: Updates the search results page.
  • Search: You can search by a character string or by a selected attribute with conditions you enter. To search by a selected attribute click Search and select an attribute to search. For more information, see Search box.

Applying search criteria

Use the query builder in the Activity Center to add and remove data from your activity audit log report to get the information you need.

By default, an activity audit log report includes all activity occurring within the last 24 hours. However, using the query options provided you can specify search criteria to retrieve specific information from the activity audit log. The available search criteria may include:

  • Activity Category: Use this drop-down to narrow parameters and event details.
  • Date Range: Use this drop-down to narrow results by hours, days, or a custom time frame you set.
  • User Name: Clicking this field opens a dialog where you can select a user for the activity report.
  • Asset Name: Clicking this field opens a dialog where you can select the asset for the activity report.
  • Account Name: Clicking this field opens a dialog where you can select the account for the activity report.

To apply search criteria to the audit log

Activity Category and Time frame are required to generate a report. Other search criteria is optional and allows you to narrow the report to the exact parameters provided.

  1. Navigate to the Activity Center (Reports > Activity Center).

  2. Activity Category defaults to All Activity (Summary Only). Click the drop-down to limit the report to select the activity category to be included in the report.

  3. Date Range defaults to Last 24 Hours. To specify a different time frame, click the drop-down and select the time frame to be included in the report. If using the Custom option, specify the custom date and time range.

  4. Clicking the User Name field opens a dialog where you can select a user for the activity report.
  5. When available, clicking the Asset Name field opens a dialog where you can select the asset for the activity report.
  6. When available, clicking the Account Name field opens a dialog where you can select the account for the activity report.

  7. To remove your selections, use Clear Search Criteria to reset the search back to the default.

Saving search criteria and loading previously saved search criteria

You can save the current search criteria defined to be used at a later time to generate an activity audit log report. You can save the current search criteria from the main Activity Center view (query builder page) or from the results view.

To save the current search criteria

  1. Navigate to the Activity Center (Reports > Activity Center).
  2. Specify the search criteria to be used to generate the desired report. For more information, see Applying search criteria.
  3. Click Save or Schedule Search.

  4. In the Save Scheduled Report dialog, enter the following information:

    1. Name: Enter a name for the search.
    2. Description: Optionally, enter descriptive text to describe the search.
    3. Run Every: By default this is set to Never. Selecting another option from the drop-down will enable additional configuration options. For more information, see Scheduling an activity audit log report
  5. Click OK.

  6. To run a previously saved search, click Select a Saved Search.

    1. Select a search from the list.

    2. Click OK.

    The search criteria for the selected search appears on the Activity Center page.

To load previously saved search criteria

  1. Navigate to the Activity Center (Reports > Activity Center).
  2. Click Select a Saved Search.
  3. Select a search from the list.

  4. Click Load Report.

    The search criteria for the selected search appears on the Activity Center page.

Generating an activity audit log report

To generate an activity audit log report

  1. Navigate to the Activity Center (Reports > Activity Center).

  2. Use the query options provided to specify the content of the report. By default the audit log returns all activity occurring within the last 24 hours. For more information, see Applying search criteria.

  3. The information displayed by default depends on the type of activity report generated. You can change the columns displayed by selecting the Columns in the upper right of the results list.

Actions once a report is generated

Once a report is generated, you can use the buttons above the grid as described below.

  • View Details: After selecting a result, click this button to open a detailed summary.
  • Request Workflow Details: Select an access request event and click Workflow to audit the transactions that occurred during the request's workflow from request to approval to review. For session requests, you can also replay a recorded session or live session from the Request Workflow dialog.
  • Export: Click to export the data as CSV or JSON to the location of your choice. Different information may be returned based on whether you select CSV or JSON. For example, JSON includes details of accounts discovered and CSV includes only the count of accounts. For more information, see Exporting data. The time is set according to the user time zone.
  • Refresh: Closes the details and updates the search results page.
  • Column: Select to display a list of columns that can be displayed in the grid. Select the check box for data to be included in the report. Clear the check box for data to be excluded from the report. The additional columns available depend on the type of activity included in the report.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating