Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

User Login Report

Created: 21 Jan 2013 | 10 comments
DLP Enthusiast's picture

Hi Guys ,

Need help with retreiving report of "User Login" in Enforce .. I need to know which user logged in, at what time and when did he sign out ? ..

Can I get that type of report to send to a Manager ? ..

Need some quick response..

Thanks !

Comments 10 CommentsJump to latest comment

Ashish-Sharma's picture

HI,

Check this artical may be help

Auditing/Monitoring of User Activity in DLP

https://www-secure.symantec.com/connect/articles/a...

Thanks In Advance

Ashish Sharma

DLP Enthusiast's picture

Hi Ashish ,

I do not have the option AUDITLOG on my Enforce Console. What do i do abt that ?

Is there no way preloaded in DLP we can monitor User Activity ? ..

yang_zhang's picture

You need to log into the Oracle DB and connect to protect to find out the AUDITLOG table.

If a forum post solves your problem, please flag it as a solution. If you like an article, blog post or download vote it up.
ebarcelos_ez's picture

Hi,

You can connect to DLP Oracle database and run the following query:

******************************************

select p.USERID,p.Name,u.AssumedRoleName,u.IPADDRESS,u.LOGONTIME,u.LOGOFFTIME

from PROTECTUSER p, USERSESSION u
where p.USERID = u.USERID
 
******************************************
 
The result will be some like this:
USERID,NAME,ASSUMEDROLENAME,IPADDRESS,LOGONTIME,LOGOFFTIME
41,"dlp-user","dlp-remediator","172.16.30.12","2012-11-09 14:23:46","2012-11-09 14:23:46"
1,"Administrator",(null),"172.16.30.2","2012-11-23 07:47:31","2012-11-23 07:49:18"
 
You can use the Auditlog as yang_zhang said but the Auditlog don't have the logoff information.
 
Hope this help...
 
Eduardo Barcelos
DLP Enthusiast's picture

@ Eduardo .. I dont think this way would be aprreciated by a Manager who would like a well organised report of User Acivity. Anyother way apart from this ?? ..

DLP Enthusiast's picture

Is there any way, where I can see a systematic report of User Actions .. What all actions have been done by a particular User on the Enforce or Endpoint ? ..

I would like a quick response ..

Thanks ..

DLP Enthusiast's picture

The Auditlog table has to be accessed from Oracle and what are the commands should i enter to access a User's details like :

Login Dates and Time
User Activity on Enforce
Log Out Time
What changes has the user made on the system .

Please advise .. its a bit Urgent ! ..

pete_4u2002's picture

open a support ticket, they might help with the script.

DLP Enthusiast's picture

@ pete ..If at all the script is ready, the Administrator has to go to Oracle to view the reports or he can see dem on Enforce ? .. And can it be customized in such a way where the Admin can select a particular user and see all activites on the Enforce only ??

pete_4u2002's picture

The SQL script help you to know the audit information.