Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions docs/privilegesecure/4.1/admin/audit&reporting/_category_.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
{
"label": "Audit & Reporting Interface",
"position": 70,
"collapsed": true,
"collapsible": true,
"link": {
"type": "doc",
"id": "interface_2"
}
}
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"label": "Access Certification Page",
"position": 10,
"position": 20,
"collapsed": true,
"collapsible": true,
"link": {
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ tasks and has the following features:
- Search – Searches the table or list for matches to the search string. When matches are found, the
table or list is filtered to the matching results.
- Add Access Cert. Task icon – Add an access certification task to the list. See the
[Add Access Certification Task](/docs/privilegesecure/4.1/admin/interface/accesscertification/accesscertificationtask.md)
[Add Access Certification Task](/docs/privilegesecure/4.1/admin/audit&reporting/accesscertification/accesscertificationtask.md)
topic for additional information.
- List of access certification tasks – Select a task from the list to view and edit settings:

Expand Down Expand Up @@ -48,5 +48,5 @@ features:
- Date Started (only visible once review is started) – Date the reviewer begins to review the access
entitlements
- Date Completed – Date the reviewer finished reviewing the access elements
- [Users Tab for Access Certification](/docs/privilegesecure/4.1/admin/interface/accesscertification/users.md)
- [Entitlements Tab for Access Certification](/docs/privilegesecure/4.1/admin/interface/accesscertification/entitlements.md)
- [Users Tab for Access Certification](/docs/privilegesecure/4.1/admin/audit&reporting/accesscertification/users.md)
- [Entitlements Tab for Access Certification](/docs/privilegesecure/4.1/admin/audit&reporting/accesscertification/entitlements.md)
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "Add Access Certification Task"
description: "Add Access Certification Task"
sidebar_position: 10
sidebar_position: 20
---

# Add Access Certification Task
Expand Down Expand Up @@ -29,7 +29,7 @@ steps to add an access certification task.
**Step 5 –** With the new access certification task selected, configure the following settings:

- Users – Add users or groups to the access certification task. See the
[Add Users to Review](/docs/privilegesecure/4.1/admin/interface/accesscertification/users.md#add-users-to-review)
[Add Users to Review](/docs/privilegesecure/4.1/admin/audit&reporting/accesscertification/users.md#add-users-to-review)
section for more information.

The new task is added to the Access Certification Task list.
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "Entitlements Tab for Access Certification"
description: "Entitlements Tab for Access Certification"
sidebar_position: 20
sidebar_position: 30
---

# Entitlements Tab for Access Certification
Expand All @@ -23,8 +23,11 @@ The Entitlements table has the following features:
- Approved – Existing access is approved
- Denied – Access is removed for that specific user/resource/permission

**NOTE:** The user is not removed from the access policy. Instead, a 'deny flag' is set
:::note
The user is not removed from the access policy. Instead, a 'deny flag' is set
against that attribute so that it can be re-enabled in the future.
:::


- User Name – Displays the name of the account
- Resource – Name of the resource
Expand Down Expand Up @@ -69,8 +72,11 @@ The Review Activity Details window has the following features:
- Approved – Existing access is approved
- Denied – Access is removed for that specific user/resource/permission

**NOTE:** The user is not removed from the access policy. Instead, a 'deny flag' is set
:::note
The user is not removed from the access policy. Instead, a 'deny flag' is set
against that attribute so that it can be re-enabled in the future.
:::


- Name – Displays the name of the account
- Resource – Name of the resource
Expand All @@ -86,19 +92,28 @@ The Review Activity Details window has the following features:

**Step 5 –** To remove access, select the applicable row(s) and click Deny.

**NOTE:** The user is not removed from the access policy. Instead, a 'deny flag' is set against that
:::note
The user is not removed from the access policy. Instead, a 'deny flag' is set against that
attribute so that it can be re-enabled in the future.
:::


**Step 6 –** When the entitlements have been reviewed, click Close. Changes are saved to the
selected access certification task and shown on the
[Entitlements Tab for Access Certification](/docs/privilegesecure/4.1/admin/interface/accesscertification/entitlements.md).
[Entitlements Tab for Access Certification](/docs/privilegesecure/4.1/admin/audit&reporting/accesscertification/entitlements.md).

**NOTE:** It is not necessary to review all entitlements at once. Changes are automatically saved to
:::note
It is not necessary to review all entitlements at once. Changes are automatically saved to
the selected access certification task and can be returned to at any time (the Status will show as
Incomplete).
:::

**CAUTION:** Committed changes cannot be undone. A new access certification task must be created.

:::warning
Committed changes cannot be undone. A new access certification task must be created.
Alternatively, it is possible to manually reassign users to an access policy.
:::


**Step 7 –** When all entitlements have been reviewed, the Commit button is enabled. Click Commit to
save the changes to user access.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,10 @@ The Users table has the following features:

Follow the steps to add users and groups to the access certification task.

**NOTE:** It is not possible to add or remove users after they have been added.
:::note
It is not possible to add or remove users after they have been added.
:::


**Step 1 –** Navigate to the Audit and Reporting > Access Certification page.

Expand Down Expand Up @@ -64,20 +67,26 @@ Users/Groups table and it is immediately moved to the Users & Groups to Add tabl
**Step 6 –** (Optional) Click a row in the Users & Groups to Add table to move it back to the
Available Users/Groups table.

**CAUTION:** It is not possible to add or remove users after they have been added to the access
:::warning
It is not possible to add or remove users after they have been added to the access
certification task.
:::


**Step 7 –** Click Add to add the selected user(s) or group(s).

The new user(s) and group(s) are added to the certification task and are shown on the
[Users Tab for Access Certification](/docs/privilegesecure/4.1/admin/interface/accesscertification/users.md).
[Users Tab for Access Certification](/docs/privilegesecure/4.1/admin/audit&reporting/accesscertification/users.md).

**Step 8 –** Click Close to return to the Access Certification page.

**NOTE:** Only the assigned reviewer can interact with the entitlements once the access
:::note
Only the assigned reviewer can interact with the entitlements once the access
certification task is created.
:::


The reviewer can now log in to see the access certification task(s) assigned to them and begin the
review process. See the
[Entitlements Tab for Access Certification](/docs/privilegesecure/4.1/admin/interface/accesscertification/entitlements.md)
[Entitlements Tab for Access Certification](/docs/privilegesecure/4.1/admin/audit&reporting/accesscertification/entitlements.md)
topic for additional information.
76 changes: 76 additions & 0 deletions docs/privilegesecure/4.1/admin/audit&reporting/activitylog.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,76 @@
---
title: "Activity Log Page"
description: "Activity Log Page"
sidebar_position: 30
---

# Activity Log Page

The Activity Log page shows the activity logs for users and resources. From here, search and
investigate the records.

![activitylogpage](/img/product_docs/privilegesecure/4.1/accessmanagement/admin/auditreporting/page/activitylogpage.webp)

The Activity Log page has the following features:

- Search — Searches the table or list for matches to the search string. When matches are found, the
table or list is filtered to the matching results.

- Additionally, filter by table and date

- Change type — Filter by change type:

- All Users
- Top 5 Users
- Top 10 Users

- Date range — Filter by date range. Enter a start date and end date.
- Refresh button — Reload the information displayed

The Summary for the Date Range table shows combined information for all the logs:

- Column headers can be resized and sorted in ascending or descending order::

- Sessions — Total number of sessions
- Total Duration — Total duration of all sessions combined
- Average — The average duration of a session
- Minimum — The minimum duration of a session
- Maximum — The maximum duration of a session

- Export as CSV – Allows exporting the Activity Log as a CSV file

The Top 5 Users for the Date Range table lists the users with the most sessions:

- Column headers can be resized and sorted in ascending or descending order:

- User — The user logged in to the session. Click to open the
[User, Group, & Application Details Page](/docs/privilegesecure/4.1/admin/interface/usersgroups/usergroupapplication/usergroupapplication.md).
- Sessions — Number of sessions per user
- Total Duration — Total duration of all sessions per user
- Average — The average duration of a session per user
- Minimum — The minimum duration of a session per user
- Maximum — The maximum duration of a session per user

The Sessions by All Users table lists all user sessions:

- Column headers can be resized and sorted in ascending or descending order:

- Session User — The user logged in to the session. See the
[User, Group, & Application Details Page](/docs/privilegesecure/4.1/admin/interface/usersgroups/usergroupapplication/usergroupapplication.md)
topic for additional information.
- Host — The resource the session is using. The details vary based on the type of resource. See
the
[Resources Page](/docs/privilegesecure/4.1/admin/interface/resources/resources.md)
topic for additional information.
- Login Account — Account user is logged in with
- Policy — Policy associated with the session. See the
[Access Policy Page](/docs/privilegesecure/4.1/admin/interface/accesspolicy/accesspolicy.md)
topic for additional information.
- Activity — Activity associated with the session. See the
[Activities Page](/docs/privilegesecure/4.1/admin/interface/activities/activities.md)
topic for additional information.
- Start — Start time of the session
- Duration — Duration of the session
- End — End time of the session
- Notes — Any notes that were entered when the session was created
- Ticket Number — Any ticket numbers that were entered when the session was created
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "DB Change History Page"
description: "DB Change History Page"
sidebar_position: 30
sidebar_position: 40
---

# DB Change History Page
Expand Down
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "Events Page"
description: "Events Page"
sidebar_position: 40
sidebar_position: 50
---

# Events Page
Expand Down
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "Audit & Reporting Interface"
description: "Audit & Reporting Interface"
sidebar_position: 60
sidebar_position: 10
---

# Audit & Reporting Interface
Expand All @@ -14,15 +14,15 @@ to use them.

Click Audit and Reporting to expand the menu. Settings can be configured for:

- [Access Certification Page](/docs/privilegesecure/4.1/admin/interface/accesscertification/accesscertification.md)
- [Access Certification Page](/docs/privilegesecure/4.1/admin/audit&reporting/accesscertification/accesscertification.md)
— Audit and remediate user access
- [Activity Log Page](/docs/privilegesecure/4.1/admin/interface/activitylog.md)
- [Activity Log Page](/docs/privilegesecure/4.1/admin/audit&reporting/activitylog.md)
— View activity logs for users and resources
- [DB Change History Page](/docs/privilegesecure/4.1/admin/interface/dbchangehistory.md)
- [DB Change History Page](/docs/privilegesecure/4.1/admin/audit&reporting/dbchangehistory.md)
— View records of database additions, updates, and deletions
- [Events Page](/docs/privilegesecure/4.1/admin/interface/events.md)
- [Events Page](/docs/privilegesecure/4.1/admin/audit&reporting/events.md)
— View the console event log
- [Log Files Page](/docs/privilegesecure/4.1/admin/interface/logfiles/logfiles.md)
- [Log Files Page](/docs/privilegesecure/4.1/admin/audit&reporting/logfiles/logfiles.md)
— View the log files from within the console
- [Reporting](/docs/privilegesecure/4.1/admin/interface/reporting.md)
- [Reporting](/docs/privilegesecure/4.1/admin/audit&reporting/reporting.md)
– View reports on activity
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"label": "Log Files Page",
"position": 50,
"position": 60,
"collapsed": true,
"collapsible": true,
"link": {
Expand Down
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "Log File Options Pages"
description: "Log File Options Pages"
sidebar_position: 10
sidebar_position: 20
---

# Log File Options Pages
Expand Down Expand Up @@ -32,8 +32,11 @@ The right of the page shows details of the selected service and has the followin

- Verbose – Extremely detailed logging

**NOTE:** There are not many Verbose log messages in Privilege Secure so the difference
:::note
There are not many Verbose log messages in Privilege Secure so the difference
between Verbose and Debug is minimal.
:::


- Debug – More information for detailed analysis of system behavior. Customer support may ask
for logs with this log level enabled for troubleshooting purposes
Expand All @@ -49,5 +52,5 @@ The right of the page shows details of the selected service and has the followin
- Cancel button (only visible when editing) – Discards changes

See the
[Log Files Page](/docs/privilegesecure/4.1/admin/interface/logfiles/logfiles.md)
[Log Files Page](/docs/privilegesecure/4.1/admin/audit&reporting/logfiles/logfiles.md)
topic for additional information.
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "Log Files Page"
description: "Log Files Page"
sidebar_position: 50
sidebar_position: 10
---

# Log Files Page
Expand All @@ -25,7 +25,7 @@ The right of the page shows the contents of the selected log file and has the fo

The log files are saved in the default location:

C:\ProgramData\Stealthbits\PAM\Log
**C:\ProgramData\Stealthbits\PAM\Log**

The log files are saved with a naming format of: `PAM-[Service][yyyymmdd]`. For example:
`PAM-ActionService20191002.log`
Loading
Loading