Analytics and Reporting
BeyondInsight contains a data warehouse solution with business intelligence and analytics. This module extracts data from the BeyondInsight database and then processes the data in Microsoft SQL Server Integration and Analysis Services. You can browse these cubes in BeyondInsight, Microsoft SQL Server Management Studio, or using tools such as Microsoft Excel.
Using BeyondInsight Analytics & Reporting Cloud, you can perform the following:
- Run reports on:
- Scanned target details
- Asset details
- Password Safe and Workforce Passwords licensing usage
- BeyondInsight user audit activity by user action, username, and IP address
- Password Safe activity, such as:
- Detailed view of all password and session activity
- Password Safe release and update activity
- Scheduled password changes
- Password age for managed accounts
- User and group entitlements
- Smart Rule details
- Assets and managed accounts that are associated with multiple Smart Rules
- Details on whether or not sessions were reviewed, when, and by whom
- Who has admin access to your applications
- Secrets Safe entitlements
- Download reports as the following file types: Word, Excel, PDF, TIFF, CSV (comma delimited).
- Subscribe to reports to have them generated on a schedule and made available for file download from the subscription on the Analytics & Reporting page in BeyondInsight.
Prerequisites
To view reports, users must have read permissions to the Analytics and Reporting and Management Console Access features, which are assigned at the user group level. Administrators can view all reports.
Some report categories are visible only when specific product licenses are detected and if read permissions have been assigned to the user group for specific features, as listed below.
| Report Category | License and Permission Requirement |
|---|---|
| Active Directory Bridge | AD Bridge license |
| Endpoint Privilege Management | Endpoint Privilege Management license and read permissions for the Endpoint Privilege Management feature |
| Licensing | Read permissions for the License Reporting feature |
| Privilege Management UNIX Linux | Privilege Management for Unix & Linux license and read permissions for the Endpoint Privilege Management for Unix & Linux feature. |
| Password Safe | Password Safe license |
| Secrets Safe | Password Safe license |
Report by category in BeyondInsight cloud
The table below provides a list of reports, with their descriptions, found in each report folder in BeyondInsight Analytics & Reporting Cloud.
| Report Folder | Report Name | Report Description |
|---|---|---|
| Scan | Discovery | Provides details for the list of targets scanned. |
| Network Discovery | Provides details for the list of targets scanned across multiple scans. | |
| Asset | Assets | Shows the asset details for the selected host machines. |
| Custom Attributes | Lists assets along with their custom attributes. | |
| Service | Shows the services for the selected host machines. | |
| Software | Shows the software for the selected host machines. | |
| User Account | Shows the user accounts for the selected host machines. | |
| Operating System | Shows the operating systems for the selected host machines. | |
| Port | Shows the ports for the selected host machines. | |
| Windows Events | Shows collected Windows events. | |
| Licensing | Password Safe User Licensing | Shows Password Safe logins by month, week, or day for a specified time period. |
| Workforce Passwords Usage Summary | Provides a list of users with the ability to access the Workforce Passwords feature. | |
| Configuration | User Audits | Shows the activity of BeyondInsight users by action, user name, IP address, and more, including ability to drill down into each row to view specific details. |
| Account | Database User List | Provides a list of database users with their details. |
| Password Safe | Activity | Contains a detailed history of all Password Safe changes made to the appliance by any user. |
| Password Release Activity | Provides a list of Password Safe password release activity details. | |
| Password Update Activity | Lists details of Password Safe password update activity. | |
| Password Update Schedule | Lists details of upcoming scheduled password updates. | |
| Managed Account Password Age | Lists all accounts managed by Password Safe along with the password age details. | |
| Account Password Age by Last Scan | Provides a list of users along with the accounts they have access to. | |
| Service Account Usage | Provides a detailed list of what systems are using a Password Safe service account to start one or more services. | |
| Scheduled Password Change Configuration | Provides details of Password Safe upcoming scheduled password changes. | |
| Password and Session Activity | Provides a detailed transactional view limited to top 50,000 Password Safe password and session activities. | |
| Admin Session Activity | Provides a detailed view of Password Safe admin session activities. | |
| Entitlement by User | Provides a list of users along with the accounts they have access to. | |
| Entitlement by Group | Provides a detailed view of Password Safe group membership and permissions. | |
| Inactive Managed Accounts | Provides a list of accounts that are inactive or not accessed by a requester in a specified number of days. The default number of days is 30. This can be modified. | |
| Application Inventory | Provides a list of application inventory details. | |
| Smart Rule Details | Provides a list of Smart Rules and details by type and category. | |
| Remote Session Activity | Provides a detailed view of Password Safe remote session activities. | |
| Smart Rule Overlap | Shows assets or managed accounts that are selected for management in Password Safe by multiple Smart Rules. Overlapping Smart Rules cause an increase in database updates for account settings, which degrades system performance. | |
| Reviewed Sessions | Provides details on when and who reviewed sessions, and provides a filter to show sessions that have not been reviewed. | |
| Application Audit | Provides a list of who has administrative access to managed applications, by application name, Smart Group, user group, Password Safe role, username, and managed account. | |
| Secrets Safe | Secrets Safe Entitlement Report | Provides a list of user groups and the secrets they are entitled to. |
Manage report subscriptions in BeyondInsight
In addition to running reports on demand, you can set up a subscription to reports. For BeyondInsight Cloud deployments, subscribing to reports allows you to set a schedule to automatically run the report and have it available for download from the subscription on the Analytics & Reporting homepage.
Create a report subscription using BeyondInsight cloud
Subscribe to a report while viewing a report or a saved report view, as follows:
-
From the left menu, click Menu >Analytics & Reporting.
-
From the All Reports pane, expand the report folders to locate your desired report, or search for a report using title or description keywords.
-
Click the report to open it.
-
Once the report displays, click the Subscribe to Report button (envelope icon) above the report.
-
Click Next.
-
Provide the file name for the subscription.
-
Select the file format for the report.
-
Enter a comment to display in the Download Reports grid.
-
Select a delivery schedule frequency from the list, depending if you want the report generated once or on a recurring schedule.
-
If you selected a One Time schedule type, specify a start date and time for the report.
-
If you selected a Recurring schedule type:
- Optionally specify an end date.
- Specify a start date and time for the report.
- Select Daily, Weekly, or Monthly for the frequency.
- Set the cadence for the selected frequency.
-
Click Finish.
-
The subscription is listed on the New tab of the Subscriptions pane.
-
You can now download the reports generated for the subscription:
- Click the vertical ellipsis for the subscription.
- Select Download Reports.
- The Download Reports window displays.
- To download a single report:
- Click the Download icon for that row in the grid.
- OR select the row, and then click Download Selected above the grid.
- To download multiple reports:
- Select the rows in the grid.
- Click Download Selected above the grid.
Note
- Add the Processing Elapsed Time and File Format values for the listed reports by clicking Column Chooser above the grid and selecting those columns to display in the grid. To narrow down the reports listed, use the Filter by dropdown to filter the list by Date Generated and File Format.
- Reports generated from subscriptions are stored for 7 days. Reports older than 7 days are purged from the database on a nightly basis. This is not configurable.
Manage report subscriptions
For both BeyondInsight on-premises and cloud deployments, you can view, edit, and delete subscriptions from the Subscriptions pane on the Analytics & Reporting homepage and also from the Subscriptions pane while viewing the report where the subscription was created.
For BeyondInsight on-premises only, you can manage your report subscriptions using the following two additional methods:
- From the Subscriptions pane while viewing a Saved View for a report where the subscription was created.
- From Configuration > Analytics & Reporting > Configuration.
Note
Only subscription owners and administrators can edit and delete subscriptions.
Manage subscriptions directly from the Analytics & Reporting page
Manage report subscriptions directly from the Analytics & Reporting homepage, or from a specific report or saved report view (on-premises only), as follows:
- From the left menu in BeyondInsight, click Menu > Analytics & Reporting.
- All subscriptions for all reports are listed on the Subscriptions pane and you can manage them directly from there.
- Alternatively, select a report from the folders or a saved view from the Saved Report Views (on-premises only) under All Reports, and then click Subscriptions from the left pane.
- All subscriptions for the specific report or saved view are listed in the Subscriptions pane and you can manage them from there.
- Whether viewing subscriptions directly from the Analytics & Reporting page, or from a report or saved view, the Subscriptions pane defaults to the All filter. To find a subscription quickly:
- Click Failed or New to filter the subscriptions.
- Search for a specific subscription by typing keywords in the Search box.
- Sort the list of subscriptions using the Sort By dropdown.
- To view details for a subscription:
- Click the vertical ellipsis for the subscription.
- Select View Subscription Status.
- A window displays showing the owner of the subscription, the delivery type, the email recipient if applicable, the date the subscription was last modified, and the date it was last executed.
- To edit a subscription:
- Click the vertical ellipsis for the subscription.
- Select Edit Options. The same wizard displays as does for creating a subscription.
- Change the settings as needed, and then click Finish to complete wizard.
- To delete a subscription:
- Click the vertical ellipsis for the subscription.
- Select Delete.
- Click Delete on the confirmation message.
Updated 9 days ago