You can use predefined reports and their associated queries to monitor activities by default users. You can use the default keyed list only or you can supplement it with your own values. Predefined values include administrador, administrateur, administrator, bin, cisco, daemon, DBSNMP, Guest, helpdesk, Imnadm, invscout, IUSR_ComputerName, mail, Nobody, root, sa, sshd, sys, SYSMAN, system, and Uucp.
To customize the list, you identify the default users that are created during operating system, database, or application installations as values in the key-value list for Default_Users.
The reports that use the keyed values for Default_Users include:
If you create a custom query that uses this key, define the filter as follows:
Column |
Operator |
Value |
---|---|---|
dest_username |
Keyed |
Default_Users |
To customize keyed values for Default_Users
A list of keys to which you add user-defined values is displayed at the bottom of the main pane.
The predefined values appear.
Reports using this keyed list that are generated by scheduled jobs begin reflecting data for the updated values.
Copyright © 2010 CA. All rights reserved. | Email CA Technologies about this topic |