User Activity report


All contemporary security strategies and specifications rely on tracking user access as an essential component. BMC Defender Server supports this strategy by automatically detecting users (via the Messages > Catalogs > Users) and recording messages associated with these users in real-time.

The BMC Defender User Activity report furnishes reports on user activity, useful for verifying that you access tracks in compliance with various standards. The User Activity reports demonstrate each user is monitoring (referenced by user name) and show useful statistics for each user.

The report gathers metrics on each managed user of the system, scanning the list of received messages, and tabulating key metrics for each managed user. The report is useful to auditors in that it easily demonstrates that each user of the system (or users of a particular type, such as privileged users) are accounted for and managed by the system.

Note

The User Activity report facility is related to the Messages > Catalogs > Users screen, in that it furnishes a way of tracking users. However, unlike the Messages > Catalogs > Users screen, the User Activity report does not operate in real-time, and generates reports at midnight or on-demand across all messages, and performs special processing to tabulate metrics for each user on the system that might not be otherwise available to the operator.

This section provides information about the following topics:


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*