Chat now with support
Chat with Support

One Identity Safeguard for Privileged Sessions 5.9.0 - Administration Guide

Preface Introduction The concepts of SPS The Welcome Wizard and the first login Basic settings User management and access control Managing SPS
Controlling SPS: reboot, shutdown Managing Safeguard for Privileged Sessions clusters Managing a high availability SPS cluster Upgrading SPS Managing the SPS license Accessing the SPS console Sealed mode Out-of-band management of SPS Managing the certificates used on SPS
General connection settings HTTP-specific settings ICA-specific settings RDP-specific settings SSH-specific settings Telnet-specific settings VMware Horizon View connections VNC-specific settings Indexing audit trails Using the Search (classic) interface Using the Search interface Searching session data on a central node in a cluster Advanced authentication and authorization techniques Reports The SPS RPC API The SPS REST API SPS scenarios Troubleshooting SPS Configuring external devices Using SCP with agent-forwarding Security checklist for configuring SPS Jumplists for in-product help Third-party contributions About us

The occurrences table

NOTE:

The structure of these database tables may change in future SPS versions.

Table 22: Columns of the occurrences table
Column Type Description
end_time integer The time when the token (keyword) disappears in the audit trail.
id integer The unique ID number of the entry.
result_id integer An ID identifying the occurrence of the token. This value is a reference to the id column of the results table.
screenshot text A hash of the screenshot used in the report. The actual screenshot is not stored in the database.
start_time integer The time when the token (keyword) appears in the audit trail.

The progresses table

NOTE:

The structure of these database tables may change in future SPS versions.

This table contains information only about Audit Player indexers. It does not contain any information about the indexer service.

Table 23: Columns of the progresses table
Column Type Description
audit text

Audit-trail: Name and ID of the audit file storing the traffic of the channel. If the session has an audit trail, a icon is displayed. Note that a the following letters may appear on the download icon:

ap_id integer [OBSOLETE] The ID of the Audit Player indexer service that is processing the audit trail.
id integer The unique ID number of the entry.

The results table

NOTE:

The structure of these database tables may change in future SPS versions.

Table 24: Columns of the results table
Column Type Description
channel_id integer The ID of the channel where a token was found. This value is actually a reference to the id column of the channels table.
id integer The unique ID number of the entry.
token text The token (search keyword).

The skipped_connections table

NOTE:

The structure of these database tables may change in future SPS versions.

Table 25: Columns of the skipped_connections table
Column Type Description
channel_id integer The ID of the channel. This value is actually a reference to the id column of the channels table.
id integer The unique ID number of the entry.
occasions integer
Related Documents