Previous Topic: Create Keyed Values for Critical_Assets

Next Topic: View a Report Using a Keyed List

Customize Keyed Values for Administrators

This topic provides an example of adding custom values to a predefined keyed list that has some values already set. You can follow this example to add values to other existing keyed lists.

You can use predefined reports and their associated queries to monitor activities by your administrators. Predefined values include Administrator, root, sa, and admin. To customize the list, identify other accounts in your environment that have admin privileges as values in the key-value list for Administrators.

If you create a custom query that uses this key, define the filter as follows:

Column

Operator

Value

dest_username

Keyed

Administrators

To define a filter for other keyed lists, replace the value with the list value you want. For example, you could set the filter value to EPHI_Database to filter for hostnames belonging to that keyed list.

To customize keyed values for Administrators

  1. Click the Administration tab, the Library subtab, and the Keyed List folder.

    A list of keys to which you add user-defined values is displayed at the bottom of the main pane.

  2. Select the key, Administrators.

    The predefined values appear.

  3. Take one or more of the following actions to update this list:
  4. Click Save.

    Reports using this keyed list that are generated by scheduled jobs begin reflecting data for the updated values.