Previous Topic: Step 4: Marking Transactions for Further InvestigationNext Topic: Risk Advice Summary Report


Risk Evaluation Detail Activity Report

This report displays all transactions performed by CA Risk Authentication Server.

To generate this report, you must specify:

The following table lists the information included in a Risk Evaluation Detail Activity.

Fields

Description

Date Logged

The timestamp when risk evaluation was performed for the user.

User Name

The unique ID of the user who performed the risk-evaluation activity.

Organization Name

The organization to which the user belongs.

Transaction Type

The type of risk-evaluation activity that was performed by CA Risk Authentication Server. These activities include:

  • Evaluate Risk
  • Update Attributes
  • Create Associations
  • Delete Associations

Status

The status of the event action taken and can be:

  • Success: CA Risk Authentication was able to perform the risk evaluation activity successfully.
  • Failure: CA Risk Authentication was not able to perform the risk evaluation activity successfully.

Score

The score generated for the given transaction.

Advice ID

The advice generated by CA Risk Authentication, depending on the score generated. The advice can be one of the following:

  • Allow
  • Deny
  • Alert
  • Increase Authentication

Matched Rule

The rule that matched.

Secondary Authentication Result

The result of secondary authentication that was returned to CA Risk Authentication by your application, if the Risk Advice generated by CA Risk Authentication was "Increase Authentication".

Transaction Status

The status of the transaction.

Configuration Name

The ruleset configured for the organization to which the user belongs.

Action

The corresponding action (for example, Login) that was performed for the current Event.

Caller ID

A unique identifier passed to the CA Risk Authentication APIs by your calling application.

Note: Caller ID can be blank, if your calling application does not set the value.

Transaction ID

The unique numerical identifier created each time you submit a transaction (such as, administrator login, view records, and update user and organization information) to CA Risk Authentication Server.

Note: You can use this ID to isolate information about a specific transaction in the log files.

Session ID

The unique numerical identifier created each time you log in to Administration Console. This session lasts until you log out.

Instance ID

If there are multiple instances of CA Risk Authentication Server are running, then this field uniquely identifies the instance that you logged in to.

Note: This data is used by CA Support personnel to diagnose problems.

Country

The country where the transaction originated.

Note: This is derived from the Client IP Address value.

Client IP Address

The IP address of the end user’s system.

Incoming DeviceID

The incoming DeviceID string.

 

Outgoing DeviceID

The corresponding Device ID that was generated during the transaction, if this is the first transaction from the end user’s system.

Device Type

The type of device involved in the transaction.

Device ID Status

The status of the Device ID:

  • READ: The Device ID was read from the device.
  • NEW: The Device ID was assigned to the device.
  • REVERSE LOOKUP: The Device ID was determined by matching the input device signature against the device signatures that were successfully associated with the user.

All Rules Result

The result of all rules applied.

If a rule was applied, then the result (Yes or No) indicates whether the rule returned a match or not.

Account Type

The account type configured for the organization.

Account ID

The account ID of the user who performed the risk-evaluation activity.