Chat now with support
Chat with Support

On Demand Audit Current - User Guide

Introducing On Demand Audit Configuring On Demand Audit Change Auditor Integration Working with On Demand Audit Appendix A: Working with Filters Documentation Roadmap

Using the dashboard

When you open On Demand Audit, the dashboard displays a visual summary of the most important metrics of the Office 365 and Azure Active Directory activity in your organization.

You can use the data to discover trends and quickly locate the information that you need. To further drill into the event details, you can use the visualizations offered with searches. See Visualizing searches.

The information in the dashboard is updated in real time, allowing you to quickly gain valuable insights into the activity taking place in your organization.

The Overview tab displays:

  • Number of events (Event count)
  • Total number of unique users
  • Activity (A drop-down is available so that you can select the activity that you want to see.)
  • User Name (A drop-down is available so that you can select the users that you want to see.)
  • Top 10 active users
  • Activity heat map that visually breaks down the activity in a display that shows which events are more prevalent.

The Sign-ins tab displays:

  • Sign-ins by location on a map
  • Sign-ins by unique application and users or you can filter for specific applications and users
  • Successful and failed sign-ins
  • Sign in activity timeline

By hovering over the right corner of any section, you are provided with more options for sharing and customizing the data.

  • Select Export data to .xlsx or .csv file.
  • Sort the data
  • Use the available slider to fine grain the dates included in the view.

You can also perform a broad search through all your events, using the Quick Search.

Searching for specific event data (Quick Search)

Performing a quick search allows you to search through all events based on a specific value, term, or keyword.

To search for data within an event

  1. Enter the search term in the Quick Search box and click the magnifying glass icon.

The resulting lists display all events that have a value matching the search term or value, sorted by the time detected. The search terms are highlighted in the search results and event details to allows you to quickly scan for matches.

NOTE: You can also export the search results to a .csv or zip file by selecting the Export button. The location for the file is determined by your browser settings.

Working with searches

Running a search

Once On Demand Audit captures an event, you can view all available event data through searches. You can use custom searches based on your own criteria or built in searches that are configured to meet the most common requests. See Creating a custom search and Using built in searches.

NOTE: Custom user-built searches are identified by the following icon to the left of the search.

To run a previously saved or built in search

  1. Select the Searches tab.
  2. Locate the required search in the list of categories.
  3. To run the search, simply click it or highlight it and click the run (arrow) icon.
From here you can:
Related Documents