Chat now with support
Chat with Support

On Demand Audit Current - User Guide

Introducing On Demand Audit Configuring On Demand Audit Change Auditor Integration Working with On Demand Audit Appendix A: Working with Filters Documentation Roadmap

Using the dashboard

When you open On Demand Audit, the dashboard displays a visual summary of the most important metrics of the Office 365 and Azure Active Directory activity in your organization.

You can use the data to discover trends and quickly locate the information that you need. To further drill into the event details, you can use the visualizations offered with searches. See Visualizing searches.

The information in the dashboard is updated in real time, allowing you to quickly gain valuable insights into the activity taking place in your organization.

The Overview tab displays:

  • Number of events (Event count)
  • Total number of unique users
  • Activity (A drop-down is available so that you can select the activity that you want to see.)
  • User Name (A drop-down is available so that you can select the users that you want to see.)
  • Top 10 active users
  • Activity heat map that visually breaks down the activity in a display that shows which events are more prevalent.

The Sign-ins tab displays:

  • Sign-ins by location on a map
  • Sign-ins by unique application and users or you can filter for specific applications and users
  • Successful and failed sign-ins
  • Sign in activity timeline

By hovering over the right corner of any section, you are provided with more options for sharing and customizing the data.

  • Select Export data to .xlsx or .csv file.
  • Sort the data
  • Use the available slider to fine grain the dates included in the view.

You can also perform a broad search through all your events, using the Quick Search.

Searching for specific event data (Quick Search)

Performing a quick search allows you to search through all events based on a specific value, term, or keyword.

To search for data within an event

  1. Enter the search term in the Quick Search box and click the magnifying glass icon.

The resulting lists display all events that have a value matching the search term or value, sorted by the time detected. The search terms are highlighted in the search results and event details to allows you to quickly scan for matches.

NOTE: You can also export the search results to a .csv or zip file by selecting the Export button. The location for the file is determined by your browser settings.

Working with searches

Working with private and shared searches

When you create a search, you have the option of selecting whether it will be private or shared.

  • Private searches are only visible to the individual who created them.
  • Shared searches are visible to all On Demand Audit users and allow for collaboration with multiple users from the same organization.

NOTE:

  • The ability to set the search type as private or shared depends on your assigned access role within On Demand Audit. For details, see On Demand Audit Access Control roles

  • Private search names must be unique among all categories for each user.

  • Shared search name must be unique among all shared searches in all categories in the organization

  • All private searches (as well a searches under the My Searches category) are listed under the All Private Searches category.
  • Shared searches include an information icon that allows you to see when they were created, last saved, and by whom.

 

 

See Creating a custom search, Creating a search from an existing search, and Modifying a search

 

 

Related Documents