iConsole Search Definition Reference Guide › Reference Information › Security ID Processing

Security ID Processing

Some customers require additional security measures to ensure that users are only permitted to view events that they are allowed to see. This is implemented by adding a Security ID to each event on capture and checking that this ID is included in a list of IDs permitted to the user.

In order to support this capability in iConsole searches the only requirement is that the search should be of class EventReview or EventReport and return the Security ID in a column named $SID.

The security mechanism is enabled by defining a registry setting on the iConsole server back end with a key of UserSIDAttribute. This setting identifies the name of a user attribute that will contain the permitted Security IDs for the user.

When this feature is enabled, an error will be produced if:

• The UserSIDAttribute setting is blank.
• The search is of class EventReview or EventReport and does not return a column named $SID.
• The results contain a Security ID that is not in the user's list of permitted SIDs.