Video Screencast Help
Give us your opinion and win with Symantec! Please help us by taking this survey to tell us about your experience with Symantec Connect, so that we can continue to grow and improve.  Take the survey.

User Login Report

Created: 21 Jan 2013 | 10 comments
DLP Enthusiast's picture

Hi Guys ,

Need help with retreiving report of "User Login" in Enforce .. I need to know which user logged in, at what time and when did he sign out ? ..

Can I get that type of report to send to a Manager ? ..

Need some quick response..

Thanks !

Comments 10 CommentsJump to latest comment

Ashish-Sharma's picture

HI,

Check this artical may be help

Auditing/Monitoring of User Activity in DLP

https://www-secure.symantec.com/connect/articles/a...

Thanks In Advance

Ashish Sharma

DLP Enthusiast's picture

Hi Ashish ,

I do not have the option AUDITLOG on my Enforce Console. What do i do abt that ?

Is there no way preloaded in DLP we can monitor User Activity ? ..

yang_zhang's picture

You need to log into the Oracle DB and connect to protect to find out the AUDITLOG table.

If a forum post solves your problem, please flag it as a solution. If you like an article, blog post or download vote it up.
ebarcelos_ez's picture

Hi,

You can connect to DLP Oracle database and run the following query:

******************************************

select p.USERID,p.Name,u.AssumedRoleName,u.IPADDRESS,u.LOGONTIME,u.LOGOFFTIME

from PROTECTUSER p, USERSESSION u
where p.USERID = u.USERID
 
******************************************
 
The result will be some like this:
USERID,NAME,ASSUMEDROLENAME,IPADDRESS,LOGONTIME,LOGOFFTIME
41,"dlp-user","dlp-remediator","172.16.30.12","2012-11-09 14:23:46","2012-11-09 14:23:46"
1,"Administrator",(null),"172.16.30.2","2012-11-23 07:47:31","2012-11-23 07:49:18"
 
You can use the Auditlog as yang_zhang said but the Auditlog don't have the logoff information.
 
Hope this help...
 
Eduardo Barcelos
DLP Enthusiast's picture

@ Eduardo .. I dont think this way would be aprreciated by a Manager who would like a well organised report of User Acivity. Anyother way apart from this ?? ..

DLP Enthusiast's picture

Is there any way, where I can see a systematic report of User Actions .. What all actions have been done by a particular User on the Enforce or Endpoint ? ..

I would like a quick response ..

Thanks ..

DLP Enthusiast's picture

The Auditlog table has to be accessed from Oracle and what are the commands should i enter to access a User's details like :

Login Dates and Time
User Activity on Enforce
Log Out Time
What changes has the user made on the system .

Please advise .. its a bit Urgent ! ..

pete_4u2002's picture

open a support ticket, they might help with the script.

DLP Enthusiast's picture

@ pete ..If at all the script is ready, the Administrator has to go to Oracle to view the reports or he can see dem on Enforce ? .. And can it be customized in such a way where the Admin can select a particular user and see all activites on the Enforce only ??

pete_4u2002's picture

The SQL script help you to know the audit information.