User explorer

Explore ► Users

Using the explorer

  1. Drill down on a user name, IP address, or site to investigate user activity. You can zoom in on a user, a conversation, a time range, or a geographical range. You can also capture packets to examine traffic.
  2. All sections can be refocused and offer further drilldowns. See the example for details.

Example

You can open the User explorer with no focus and then browse, but a great way to focus your analysis is to start with the search engine. For example:

  1. On the NAM Server, search for a certain user name. In this example, we searched for "APPS" in the search box at the top of the NAM Server screen.
  2. In the search results, we see that there was a match in the Users category.
  3. We go to that tab of the search results and drill down from the matching user to the User explorer.
  4. The User explorer is all about users, or all about the selected user. It shows the following:
    • User details table.
      • Change per user name to a different perspective
      • Click an entry in the User name column to refocus the report or drill down to a relevant report or tool.
    • Number of operations over time chart.
      • Change per top 10 most active from client IP addresses to a different focus.
      • Click a bar to access various options (depending on the User details perspective):
        • zoom in on the selected time range
        • show conversation details in the Network explorer
        • search for an IP address
    • Performance details table.
      • Change per software service to a different perspective
      • Click active data in the table to see relative selection and drilldown options
    • Health charts.
      • Select a different value in the Show ... metric charts list to change the chart perspective. Try All to draw charts for all options, then change it to focus on something specific.
      • Click a bar in any chart to zoom in on the selected time range.