Previous Topic: Customize Keyed Values for Critical_DDL_Actions

Next Topic: Customize Keyed Values for Error_Action

Customize Keyed Values for Default_Users

You can use predefined reports and their associated queries to monitor activities by default users. You can use the default keyed list only or you can supplement it with your own values. Predefined values include administrador, administrateur, administrator, bin, cisco, daemon, DBSNMP, Guest, helpdesk, Imnadm, invscout, IUSR_ComputerName, mail, Nobody, root, sa, sshd, sys, SYSMAN, system, and Uucp.

To customize the list, you identify the default users that are created during operating system, database, or application installations as values in the key-value list for Default_Users.

The reports that use the keyed values for Default_Users include:

If you create a custom query that uses this key, define the filter as follows:

Column

Operator

Value

dest_username

Keyed

Default_Users

To customize keyed values for Default_Users

  1. Click the Administration tab and the Services subtab.
  2. Click Report Server.

    A list of keys to which you add user-defined values is displayed at the bottom of the main pane.

  3. Select the key, Default_Users.

    The predefined values appear.

  4. Take one or more of the following actions to update this list:
  5. Click Save.

    Reports using this keyed list that are generated by scheduled jobs begin reflecting data for the updated values.

More information:

Example: Send an Alert that Runs an IT PAM Process Per Row