User Actions Reports
To search for and generate a report on all user actions performed and attempted, use the User Actions Real-Time Report.
Menu path:
Preparing a Real-time Report includes the common options that you specify for all Real-Time Reports.
Optional filter operators can be sorted in ascending or descending order. Choose sort order using the drop-down menu.
For information on saving the generated report, see Formats for Saving a Generated Report.
| Option | Field | Description |
|---|---|---|
| Source Device | devIP | IP address of the device that sent log data |
| Journal Type | jrnEntryType | Two-character Audit Journal record (entry) type |
| Journal Description | jrnTypeDesc | Description of the journal entry type |
| Journal Job | jobName | Name of the job that caused the entry to be created |
| Journal User | jrnUserName | Profile name of the user associated with Journal Job |
| Journal Number | jrnJobNbr | Job number of the Journal Job |
| Journal Program | jrnPgm | Name of the program that created the entry |
| Journal Library | jrnPgmLib | Program library |
| Journal System Name | jrnSyName | Name of the system where the journal resides |
| Journal Remote Port | jrnRmtPort | Remote port of the system associated with the journal entry |
| Journal Remote Address | jrnRmtIPAdr | Network address of the system associated with this entry |
| Action | action | An action associated with the entry type |
| Action Description | actionDesc | Description of the action |
| Attribute Name | attribute | Name of an attribute that was the target of the action |
| Attribute Description | attributeDesc | Description of the attribute (if available) |
| Destination Server | destServer | Name of a remote workstation or server in a network event |
| DLO Folder | DLOFolder | Name of the Document Library Object folder |
| DLO User | DLOUser | Name of the Document Library Object owner or user creating or accessing the DLO |
| Entry Type | entryType | Type of event or entry in the journal type (can be considered a subtype of the journal type) |
| Entry Description | entryDesc | Description of the entry |
| Job Name | jobName | Name of the Journal Job or the job that was the target of the action described in the entry |
| Job Number | jobNumber | Number of the Journal Number or the job that was the target of the action described in the entry |
| Job User | jobUser | The Journal User of profile name of the user associated with the job that was the target of the action described in the entry |
| Local IP Address | lclIPadr | Local IP address of the system involved in the network event |
| Object Library | lib | Library of the object that was acted on |
| Object Name | obj | Name of the object that was acted on |
| Object Type | objType | Type of object that was acted on |
| Remote IP Address | rmtIPadr | Remote IP address of the system involved in the network event |
| Source Server | srcServer | Name of a workstation or server where the audited event occurred, or that was the source system in a network event |
| Status | status | Status code |
| Status Description | statusDesc | Description of the status code (if available) |
| User ID/Profile | user | A user ID (UID) or user profile involved in the recorded event; typically the originator or target of the event |
| Journal Code | details | Provides event details. |
| Count | (computed by the appliance) | A count of action attempts, entries, or other count information; dependent on Journal and Entry type |
Copyright © Cloud Software Group, Inc. All rights reserved.