Viewing SRA Top Users Reports

The Top Users report displays the users who used the most connections on the specified date.

To view the Top Users report, complete the following steps:

1	Click the Reports tab.

2	Select the SRA appliance.

3	Expand the Data Usage tree and click Users. The Top Users page displays.

 

4	The pie chart displays the percentage of connections used by each user.

The table contains the following information for all users:

•	Users—the user name

•	Connections—number of connection events or “hits”

By default, the Reporting Module shows yesterday’s report, a pie chart for the top six users, and a table for all users. To change the date of the report, click the Start field to access the pull-down calendar.

5	To display a limited number of users, use the Search Bar fields.

NOTE: This report allows you to drill down by user. Clicking on a user in either the chart or grid view takes you to the Log Analyzer.

Viewing User Activity Logs

Web User Activity logs allow you to filter results to view only the activity of a specific user.

The User Activity Analyzer provides a detailed report listing activity filtered by user. If a user report has been saved previously, bringing up the User Activity Analyzer displays a list of saved reports under the Filter Bar.

If you wish to create a new report, use the Filter Bar to create a new report.

1	Click the Reports tab.

2	Select a SonicWALL appliance.

3	Click on User Activity > Details to bring up the User Activity Analyzer. The User Activity Analyzer generates a Detail report based on the user name.

 

If no user activity reports were saved, only the Filter Bar displays, with the User filter pre-selected. You can enter a specific user name, or use the LIKE operator wildcards (*) to match multiple names.

4	Enter the name of the user into the field and click Go (arrow) to generate the report

The customized User Activity Details report displays a timeline of events, Initiators, Responders, Services, Applications, Sites visited, Blocked site access attempted, VPN access policy in use, user authentication, Intrusions, Initiator Countries, and Responder Countries associated with that particular user.

Data for a particular user might not be available for all of these categories.