Download Observeit User Guide v5.7 PDF

TitleObserveit User Guide v5.7
File Size2.4 MB
Total Pages56
Table of Contents
                            About This Document
Web Management Console
Recording User Sessions
Server Diary
User Diary
Free Text Search
DBA Activity
Replaying User Sessions
	Windows Session Player
	Unix Session Player
ObserveIT Key Logging
	Windows Key Logger
	Unix Key Logger
Threat Detection Console
	Viewing Threat Detection Information
	Configuring Threat Detection Chart Settings
Reports
About the Current ObserveIT Installation
                        
Document Text Contents
Page 28

26


ObserveIT User Guide

Notes

 You can expand the user session in which you are interested by clicking the to the left of the

user session. You can read through the textual transcript and find the user action that is of

interest.

 Sessions that contain an alert are displayed with an alert indication . You can expand the

session to see exactly which slide has the alert.

 If any SQL Server queries were performed on a session, they will be displayed at the end of the

session. For more information, see DBA Activity.

 You can add comments to specific sessions in the search results, by clicking the next to the

relevant session, and then clicking the "Add Comment" link. In the "Session Comment" dialog box

that pops up, enter your comment, and click "Save". Your comment will appear in the session's

expanded list of user actions. You can add as many comments as you want. Each comment will

appear as a separate entry.

 Clicking the icon next to the user session will launch the ObserveIT Session Player, and begin

replaying the entire recorded session from beginning to end. The replay can be paused, resumed,

fast forwarded or rewound, and zoomed in or out. From the Session Player, you can also save

sessions for offline viewing.

 You can filter the results to display specific user sessions by selecting the user's name from the

“Login/User" drop-down list. This list includes every user name (or login) that used the specific

application or resource.

 You can also filter the view to display results for one specific server by selecting the server's name

from the “Server” drop-down list. This list includes every server name that was used for the

specific application or resource.

Page 55

53



Reports


Report Types

You can generate custom reports based on the following types of information:

 Servers (for example, user activity on a specific server within a specified time period).

 Users (for example, users sessions grouped by login name).

 Applications (for example, applications that were used on monitored servers grouped by

application name).

 Commands (for example, commands entered on a specific date grouped by session title).

 Comments (for example, all new comments to sessions during the last 24 hours).

 Messages (for example, messages displayed to all users who logged on to a specific server).

 Tickets (for example, all sessions that are related to a specific ticket number).

 Audit Logins (logins to the Web console), Audit Sessions (recorded sessions playback), and Audit

Saved Sessions (recorded sessions that were exported).

Note: Sample (custom) reports can be edited and customized according to customer requirements.

Examples of system reports include:

 Activities Report -All user sessions on all monitored servers in the past 48 hours.

 Daily Applications Report - All applications that were accessed in the past 48 hours on all

monitored servers, including the user names who accessed them.

 Terminated Session List - Terminated session list - notification to the administrators. Note that this

built-in report differs from the other reports (system, custom, or manually created) because it

cannot be scheduled to run at specific intervals. The report is automatically sent when an Agent

session is abruptly terminated.

Note: Built-in (system) reports cannot be edited or deleted.

Similer Documents