Change Auditor 7.6 - Web Client User Guide

Navigation Control panel

The default settings for distributing and displaying events in the timeline can be customized by changing the display and group settings on the Timeline Display Settings dialog or by using the zoom slide bar on the Navigation Control panel.

The Navigation Control panel is located to the left of the top band in the timeline, and contains the following controls.

Table 17. Navigation Control panel: Buttons

Button

Description

Click this button to modify the settings used to define how events are to be distributed and displayed in the timeline. See Timeline Display Settings dialog for more information on the available settings.

Click this button to define how to center the event markers on the timeline, based on:

•

Specific date and time

•

Oldest event

•

Newest event

NOTE: The default is the current date and time.

Click this button to move the zoom slide bar up to expand the event markers within a more granular time scale.

Click this button to move the zoom slide bar down to condense the event markers on a less granular time scale.

Timeline Display Settings dialog

The Timeline Display Settings dialog appears when you click the button at the top of the Navigation Control panel. Use this dialog to filter or highlight the event markers in the timeline, show or hide event marker labels, and control the grouping of events.

Use the settings on this dialog to define how events are to be distributed and displayed in the Timeline view.

Filter

Use the filter field to customize the timeline to show a subset of event markers based on the text string entered.

As you enter text into the filter field, event markers that correspond to events that contain the text string in their event description will remain on the timeline; whereas, events that do not contain the text string will be cleared from the timeline.


	NOTE: Event markers will be cleared from both the top and bottom bands.

Highlight

Use the highlight fields to add highlighting to specific event markers within the timeline.

As you enter text into one of the highlight fields, event markers that correspond to events that contain the text string in their event description will be highlighted in the corresponding color.


	NOTE: Highlighting applies to event markers in both the top and bottom bands.

Show event label

This check box is selected by default indicating that event marker labels are to be displayed in the top band of the timeline.

Clear this check box to turn off the rendering of event labels in the timeline.

Group same events that occur on the same agent within nn minutes

This check box is selected by default, meaning that if the same event occurs on the same agent within five minutes of each other, these events are to be grouped together in the same event marker on the timeline. Using this setting, you are seeing ‘event class’ event markers.


	NOTE: By clearing this group setting, each event marker now represents a group of events on the same agent.

Group all events that occur on the same agent within nn minutes

This check box is selected by default, meaning that all events that occur on the same agent within 30 minutes of each other are to be grouped together in the same event marker on the timeline. Using this setting, you are seeing ‘agent’ event markers.


	NOTE: By clearing only this group setting, each event marker now represents an ‘event class’. By clearing both group settings, each event marker represents a single event.

Navigate timeline

Adjust time scale

Use the zoom bar controls on the Navigation Control panel to adjust the time scale for the timeline and redistribute your event markers according to the new scale. By default, the timeline displays the least granular time scale (days); however, by sliding the control up the zoom bar or clicking the button you can redistribute your event markers at hour increments.

Scroll timeline

Use one of the following methods to scroll through the event markers in the displayed timeline:

•

Drag your mouse pointer horizontally to adjust the timeline view. You can use this method on any of the bands within the timeline to view an earlier or later date/time.

•

Use the arrow controls to the far right and left of the screen to scroll by page. That is, click the right arrow to view the next page and click the left arrow to view the previous page.

•

Double-click an area on one of the bottom banks to go to the date/time represented in the selected area.

In addition, when the timeline contains more event markers than what can be displayed vertically, scroll bars are added allowing you to scroll up and down to view these additional event markers for the displayed time interval.

Center timeline

By default, the current date and time is used to center the event markers on the timeline.

To modify the center of the timeline:

Click the

button on the Navigation Control panel.

From the dialog displayed, select one of the following options:

•

This date: Select this option and use the calendar and clock controls to set the date and time to be used. (Default)

•

Oldest event

•

Newest event

Click outside the dialog to save your selection and adjust the center of the timeline.

View event details in Timeline view

Hovering your mouse pointer over an event marker displays an event tool tip box which displays a list of the event class groupings, with number of events in parentheses, associated with the selected event marker.

Clicking an event marker displays an event summary pop-up box that lists more details about the event class groupings associated with the selected event marker.

The pop-up box displays the following information for each event class grouping associated with the selected event marker:

•

Event class with number of occurrences in parenthesis.

•

Severity (colored icon in upper right corner)

•

Event message, which is a hypertext link which when selected displays the Search Results grid and Event Details pane for the event.

•

Date/time event occurred on agent. If the event marker contains multiple occurrences, clicking the arrow control adds a list of dates/times when the event occurred. In some cases, clicking the arrow control adds a scroll bar allowing you to scroll through these additional dates/times.

These additional dates/times are also hypertext links which when selected display the Search Results grid and Event Details pane for that occurrence of the event.

To close the pop-up box, click the close button in the upper right corner or click outside the pop-up box.

Change Auditor Client Comparison

The following table shows what Change Auditor features are available in the Change Auditor Windows client and Change Auditor web client.

Table 18. Change Auditor client comparison
Page/Feature	Available in Windows client?	Available in web client?
Overview Page	Yes	Yes
My Favorite Search	Yes	No
Overview Pane: Accounts Overview	No	Yes
Overview Pane: Agent Status: Enterprise	Yes	Yes
Overview Pane: Agent Status: Other	Yes	Yes
Overview Pane: Agent Status: Workstation	Yes	Yes
Overview Pane: Agent Status: <Domain>	Yes	Yes
Overview Pane: Alert History Counts	Yes: Alert History Counts	Yes: Alert History
Overview Pane: Alert History Counts by Query	Yes	Yes
Overview Pane: Coordinator Status: Enterprise	Yes	Yes
Overview Pane: Coordinator Status: <Domain>	Yes	Yes
Overview Pane: Count of Events by Event Class	Yes	Yes
Overview Pane: Count of Events by Facility	Yes	Yes
Overview Pane: Count of Events by Location	Yes	Yes
Overview Pane: Count of Events by Result	Yes	Yes
Overview Pane: Count of Events by Severity	Yes	Yes
Overview Panes: Count of Events by Subsystem	Yes	Yes
Overview Pane: File Access Rights	No	Yes
Overview Pane: File Ownership	No	Yes
Overview Pane: Recent Event Activity	Yes	Yes
Overview Pane: Top Agent Activity	Yes: Top Agent Activity	Yes: Agent Activity
Overview Pane: [Custom View]	No	Yes
Print page	Yes	No
Searches Page	Yes	Yes
Create New Folder	Yes	Yes
Create New Search	Yes	Yes
Run Search Query	Yes	Yes
Print page	Yes	No
Explorer/Folder View	Yes	Yes
Cut \| Paste \| Delete \| Move \| Copy Folder	Yes	Delete only
Rename Folder	Yes	Yes
Export Folder	Yes	No
Import Search	Yes	No
Import Folder	Yes	No
Expand All \| Collapse All	Yes	No
Searches List	Yes	Yes
Cut \| Paste \| Delete \| Move \| Copy Search	Yes	Delete only
Print	Yes	No
Export Search Query	Yes	No
Run Local Report	Yes	No
Enable \| Disable Alerts	Yes	Alert tab only
Alert History \| Delete History	Yes	No
Enable \| Disable Report	Yes	Report tab only
Set As My Favorite	Yes	No
Search Properties Tabs	Yes	Yes
Save \| Save As \| Run Search	Yes	Yes
Info Tab: Search Limit	Yes	Yes
Info Tab: Refresh Interval	Yes	No
Info Tab: Show as Widget	No	Yes
Who Tab: Add \| Delete criteria	Yes	Yes
Who Tab: Add Wildcard Expression	Yes: Add button on tab	Yes: Tab on dialog
Who Tab: Add With Events	Yes: Button on tab	Yes: Tab on dialog
Who Tab: Include Event Source Initiator	Yes	Yes
What Tab: Add	Yes	Yes NOTE: Registry, Service, Local Account searches are only available using Add With Events.
What Tab: Add With Events	Yes: Button on tab	Yes: Button on dialogs
What Tab: Delete \| Edit criteria	Yes	Yes
Where Tab: Add \| Delete criteria	Yes	Yes
Where Tab: Add Wildcard Expression	Yes: Add button on tab	Yes: Tab on dialog
Where Tab: Add With Events	Yes: Button on tab	Yes: Tab on dialog
When Tab: Date Interval settings	Yes	Yes
When Tab: Time Interval settings	Yes	Yes
When Tab: Ability to reset settings	Yes	No
Origin Tab: Add \| Delete criteria	Yes	Yes
Origin Tab: Add With Events	Yes: Button on tab	Yes: Tab on dialog
Alert Tab: Enable Alert	Yes	Yes
Alert Tab: Enable Smart Alert	Yes	Yes
Alert Tab: History Search Limit	Yes	Yes
Alert Tab: Configure Email	Yes	Yes
Alert Tab: Events per email setting	Yes: Setting on tab	Yes: Setting on dialog
Alert Tab: Time Zone setting	Yes: Setting on tab	Yes: Setting on dialog
Report Tab: Enable reporting	Yes	Yes
Report Tab: Preview report	Yes	Yes
Report Tab: Define report schedule	Yes	Yes
Report Tab: Define report configuration	Yes	Yes
Layout Tab: Select columns	Yes	Yes
Layout Tab: Define sort criteria	Yes	Yes
Layout Tab: Define display results format (grid, bar graph or pie chart)	Yes	No
SQL Tab: Copy	Yes	No
XML Tab: Copy	Yes	No
Search Results Page	Yes	Yes
Data grid view	Yes	Yes
Grid controls to sort, group and filter data	Yes	Yes
Timeline view	No	Yes
Event Details Pane	Yes	Yes
Copy event details	Yes	No
Email event details	Yes	Yes
View knowledge base	Yes	Yes
Add/view comments	Yes	Yes
View user context	Yes	Yes
Run related searches	Yes	Yes
View resource properties	Yes	Yes
Restore value on Active Directory object events	Yes	Yes
Print page	Yes	No
Deployment Page	Yes	No
Agent Statistics Page	Yes	Yes
Access by:	View menu command Agent Status Overview hot spot link	Agent Status Overview hot spot link
Start \| Stop \| Restart agent	Yes	No
Set Agent Uninstalled	Yes	No
Hide \| Show Uninstalled agents	Yes	No
View agent logs	Yes	No
Print page	Yes	No
View resource properties	Yes	No
Coordinator Statistics Page	Yes	Yes
Accessed by:	View menu command Coordinator Status Overview hot spot link	Coordinator Status Overview hot spot link
Set Coordinator Uninstalled	Yes	No
Hide \| Show Uninstalled coordinators	Yes	No
Print page	Yes	No
View coordinator logs	Yes	No
Administration Tasks Page	Yes	No
Export/Import setting/templates	Yes	No
Print pages	Yes	No
Configuration Tasks	Yes	No
Agent configuration page	Yes	No
Coordinator configuration page	Yes	No
Purge Jobs page	Yes	No
Report Layouts page	Yes	No
Private Alerts and Reports page	Yes	No
Application User Interface page	Yes	No
Auditing Tasks	Yes	No
Audit Events page	Yes	No
Excluded Accounts page	Yes	No
Active Directory Auditing page	Yes	No
Active Directory Attribute Auditing page	Yes	No
Member of Group Auditing page	Yes	No
Excluded AD Query page	Yes	No
ADAM (AD LDS) Auditing page	Yes	No
ADAM (AD LDS) Attribute Auditing page	Yes	No
Exchange Mailbox page	Yes	No
Microsoft 365 page	Yes	No
SQL Auditing page	Yes	No
SQL Data Level Auditing page	Yes	No
SharePoint Auditing page	Yes	No
File System Auditing page	Yes	No
Registry Auditing page	Yes	No
Services Auditing page	Yes	No
EMC Auditing page	Yes	No
NetApp Auditing page	Yes	No
Web Site Auditing page	Yes	No
Protection Tasks	Yes	No
Active Directory Protection page	Yes	No
ADAM (AD LDS) Protection page	Yes	No
Group Policy Protection page	Yes	No
Exchange Mailbox Protection page	Yes	No
File System Protection page	Yes	No
Shared Overviews Page	No	Yes
About Change Auditor dialog	Yes	Yes

제품을 선택하십시오.

더 나은 서비스 제공을 위해 채팅 목적을 작성해 주십시오.

문제에 대한 권장 솔루션

Change Auditor 7.6 - Web Client User Guide

Navigation Control panel

Navigate timeline

View event details in Timeline view

Change Auditor Client Comparison