How to trace user activity within the SSIM.

book

Article ID: 159166

calendar_today

Updated On:

Products

Security Information Manager

Issue/Introduction

 You want to trace user activity such as user longing/logout and what query was executed by which user.

Resolution

1. Checking for user login/log-off detail:

   - Login to the SSIM Console.
   - Navigate to below query:
     Events -> System Queries -> SSIM -> SSIM System -> SSIM Timecard Query
 
2. To get detail regarding query executed by users:
   - Login to the SSIM console and navigate to the below query:
   - Events -> System Queries -> SSIM -> SSIM System -> Queries Executed by Users
     Note:- While executing above query, you need to select "SSIM Logs" archive.

Applies To

SSIM - 4.8.1 Patch 6

RHEL - 6.x