Chat now with support
Chat with Support

Change Auditor for Logon Activity 7.1.1 - User Guide

Client components and features

The following table lists the client components and features that require a valid Change Auditor for Logon Activity license. The product will not prevent you from using these features; however, associated events will not be captured unless the proper license is applied.

NOTE: To hide unlicensed Change Auditor features from the Administration Tasks tab (including unavailable audit events throughout the client), use the Action | Hide Unlicensed Components menu command. Note this command is only available when the Administration Tasks tab is the active page.

 

Event Details Pane

What Details:

NOTE: See Search Results for more information.

Events

Facilities:

Layout Tab/Search Results Page/Reports

Columns:

Search Properties

What Tab:

NOTE: See User Logon Activity Searches/Reports for information on creating custom logon activity search queries.

Searches Page

Built-in Reports:

NOTE: See Built-in logon activity searches for a description of these search queries.

Alert Body Configuration dialog - Event Details tab

Variables (email tags):

NOTE: See the Change Auditor User Guide for a description of these email tags and how to configure alert email notifications.

 

 

 

Getting Started

Deployment requirements

Before you can begin to capture logon activity events, you must:

NOTE: See Appendix: Agent Comparison for more information.

To verify that it is licensed, right-click the coordinator icon in the system tray and select Licensing.

Run reports

Using reports, you can obtain valuable information. For example, you can:

1
Select Start | All Programs | Quest | Change Auditor | Change Auditor Client to review the events generated.
3
Expand the Shared | Built-in | Logon Activity folder in the left pane.
4
Locate and double-click All User Sessions in the past 24 hours in the right pane.

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating