ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.
How to trace user activity within the SSIM.
Article ID: 159166
Updated On:
Products
Security Information Manager
Issue/Introduction
You want to trace user activity such as user longing/logout and what query was executed by which user.
Resolution
1. Checking for user login/log-off detail:
- Login to the SSIM Console.
- Navigate to below query:
Events -> System Queries -> SSIM -> SSIM System -> SSIM Timecard Query
2. To get detail regarding query executed by users:
- Login to the SSIM console and navigate to the below query:
- Events -> System Queries -> SSIM -> SSIM System -> Queries Executed by Users
Note:- While executing above query, you need to select "SSIM Logs" archive.
Applies To
SSIM - 4.8.1 Patch 6
RHEL - 6.x
Feedback
Yes
No
Powered by
