Chat now with support
Chat with Support

Security Analytics Engine 1.1 - Help Desk User Guide

Filtering options

The following are the filtering options at the top of the Issued Alerts page:
* 
NOTE: Refreshing the screen returns the Issued Alerts page to its default settings.
* 
NOTE: Issued alerts follow the same retention settings as audit events.
From
This field specifies the date to start searching for alerts. By default, this is the current date. Click anywhere in the field to display a calendar from which to select a date to start searching for alerts. You can also manually edit the date in the field (mm/dd/yyyy).
To
This field specifies a date to stop searching for alerts. By default, this is the current date. Click anywhere in the field to display a calendar from which to select a date to stop searching for alerts. You can also manually edit the date in the field (mm/dd/yyyy).
Application(s)
This drop-down list displays the currently configured applications. Select to display issued alert information for all applications or a specific application. By default, issued alerts for all applications are displayed.
Max Records
This field is used for setting the maximum number of records (1-10000) to return for the search. By default, this is 1000 records.
Search
The Search button updates the Issued Alerts table located beneath the filtering options.
For more information on using the above filtering options, see To filter issued alerts. For information on filtering individual columns, see To filter data.

Issued Alerts table

The following information is displayed for each alert in the Issued Alerts table. By default, the issued alerts for the current date are displayed.
Date/Time
This column displays the date and time the alert was issued.
Application
This column displays the name of the application.
Resource
This column displays the name of the requested resource. It appears blank when an attribute specifying the resource is not returned by the application.
Message
This column displays the message associated with the issued alerts. It includes the email address to which the alert was sent and the score which caused the alert to be sent.
* 
NOTE: The scores shown for issued alerts are based on the configuration of the policy sending the alert. This means the scores will not always be the same as the risk score from the evaluation of the access attempt.
Policy
This column displays the risk policy that was evaluated.
User Name
This column displays the name of the user who accessed, or attempted to access, an application protected by the Security Analytics Engine.
Recipient
This column displays the email address to which the alert was sent.
Status
This column displays the status of the alert.

Filtering the issued alerts

* 
NOTE: Issued alerts follow the same retention settings as audit events.
The following procedure explains how to filter the alerts displayed in the Issued Alerts table. By default, the issued alerts for the current date are displayed.
To filter issued alerts
* 
NOTE: Refreshing the screen removes filtering and returns the Issued Alerts page to its default settings.
1
From the Home page, click Reports to open the Reports page.
2
From the Reports page, click Issued Alerts to open the Issued Alerts page.
3
In the From field, click anywhere in the field to display a calendar and select the start date. You can also manually edit the date in the field (mm/dd/yyyy).
4
In the To field, click anywhere in the field to display a calendar and select the end date. You can also manually edit the date in the field (mm/dd/yyyy).
5
In the Application(s) field, select to display alert information for all applications or a specific application.
6
In the Max Records field, set the maximum number of records (1-10000) to return for the search. By default, this is 1000 records.
7
Click the Search button to update the Issued Alerts table.
8
To further filter the list of issued alerts, use the buttons to the right of each column heading. For more information, see To filter data.

Policy Overrides

•
Introduction
•
Policy Overrides page
•
Managing overrides on the Policy Overrides page
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating