立即与支持人员聊天
与支持团队交流

Safeguard for Privileged Passwords On Demand Hosted - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Getting started with the desktop client Using the desktop client Activity Center Search box Privileged access requests Toolbox Accounts Account Groups Assets
General/Properties tab (asset) Accounts tab (asset) Account Dependencies tab (asset) Owners tab (asset) Access Request Policies tab (asset) Asset Groups tab (asset) Discovered SSH Keys (asset) Discovered Services tab (asset) History tab (asset) Managing assets
Asset Groups Discovery Entitlements Linked Accounts Partitions Profiles Settings
Access Request settings Appliance settings Asset Management settings Tags Backup and Retention settings Certificates settings Cluster settings Enable or Disable Services settings External Integration settings Password Management settings Real-Time Reports Safeguard Access settings SSH Key Management settings Security Policy Settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP 2.7 or later migration guidance Appendix C: SPP and SPS join guidance Appendix D: Regular Expressions About us

Toolbar options

The toolbar at the top of the views (except for the Toolbox and Settings), contain these options, depending on your Administrator permissions and the administrative tool you are using.

These buttons are available:

  • Apply to apply the changes and keep the dialog open
  • OK to apply the changes and close the dialog.
  • Cancel to ignore any changes made, if any, and close the dialog.

Toolbar options include the following.

Activity Center

The Activity Center is the place to go to view the details of specific events or user activity. The appliance records all activities performed within One Identity Safeguard for Privileged Passwords. Any administrator has access to the audit log information; however, your administrator permission set determines what audit data you can access. For more information, see Administrator permissions.

Closed( desktop client) Activity Center

Applying search criteria

Use the query builder in the Activity Center to add and remove data from your activity audit log report to get the information you need.

By default, an activity audit log report includes all activity occurring within the last 24 hours. However, using the query tiles provided you can specify search criteria to retrieve specific information from the activity audit log. The search criteria available includes:

  • I would like to see: Complete the Select an Activity Category dialog to narrow parameters and event details).
  • Occuring within the: Complete the Select a Timeframe dialog by hours, days, or a custom time frame you set.
  • Click to add any of the following additional criteria:
    • Add User then select one user.
    • Add Asset then select one asset.
    • Add Account then select one account.
    • Add Search Value: For sessions, you can search by keyword or value.

To apply search criteria to the audit log

Activity Category and Time frame are required to generate a report. Other search criteria is optional and allows you to narrow the report to the exact parameters provided.

  1. From the Safeguard for Privileged Passwords desktop Home page, select Activity Center.

  2. I would like to see defaults to All Activity. Click the tile to limit the report to a particular type of activity and select the activity category to be included in the report.

  3. Occurring within the defaults to Last 24 Hours. To specify a different time frame, click the tile and select the time frame to be included in the report. If using the Custom option, specify the custom date and time range.

  4. Click the Add button to further filter results. The options to add are based on the selections you made and may include user, asset, or account. When you add filters, additional tiles display such as: involving the asset.
    • If you select Add User, you can specify one user. A tile with the user displays.
    • If you select Add Asset, you can select an asset. A new tile with the asset displays. When an account is specified, the Add Asset option is not available.
    • If you select select Add Account, you can select the account. When an asset is specified, the Add Account option is not available.

  5. To search session activity for a specific keyword or value.

    1. Change the activity category (I would like to see) to Session Specific Activity (or In-Session Activity).
    2. Click the Add button and select Add Search value.

    3. In the Enter a Search Value dialog, enter the keyword or value (e.g., regedit) and click OK.

    An additional tile appears listing the keyword or value specified. If you later change the activity category, the keyword tile will be dimmed indicating it will not be included in the query.

  6. To remove or edit your selections, mouse over a query tile and use any of the following icons.

    • Clear: Resets the value back to the default. Clear is only available for Activity category and Time frame.

    • Delete: Removes search criteria tiles you added.

    • Edit: Displays the corresponding dialog allowing you to modify your selection. You can also click a query tile to edit your selection.

Saving search criteria

You can save the current search criteria defined to be used at a later time to generate an activity audit log report. You can save the current search criteria from the main Activity Center view (query builder page) or from the results view.

To save the current search criteria

  1. From the Safeguard for Privileged Passwords desktop Home page, select Activity Center.
  2. Specify the search criteria to be used to generate the desired report. For more information, see Applying search criteria.
  3. Click Save.

  4. In the Save Search dialog, enter the following information:

    1. Name: Enter a name for the search.
    2. Description: Optionally, enter descriptive text to describe the search.
  5. Click OK.

  6. To run a previously saved search, click Open.

    1. Select a search from the list. (The criteria for the selected search is displayed in the right pane.)

    2. Click Open.

    The query tiles for the selected search appear in the Activity Center page, where you can then select Run to generate the report.

Related Topics

Editing or deleting a saved search or scheduled report

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级