Application analytics

What are applications?

Applications, as defined by EPM for Windows and Mac, include the following:

Windows application types

macOS application types

The Applications page

1. Analytics tabs: Access the Dashboard, Events, Applications, and Users pages.
2. Filters: Select a filter to refine your results. Click Clear Filters to remove all filters from your results.

   Available filters

   • Time Period
   • Computer groups
   • Operating system
   • Application type
   • Admin required
   • App description
   • App name
   • Application group name
   • Downloaded status
   • Drive type
   • Elevation method
   • Elevation action
   • Message name
   • On demand
   • Policy name
   • Publisher
   • Workstyle name

3. Save View and Load View: Save your filter preferences and load the view later for quick access to your most frequently-used preferences.
5. Columns: Details for each event.

   Available columns

   • Application name
   • Versions
   • Admin Required
   • Processes
   • Users
   • Computers
   • Date Discovered
   • Last Event
   • Operating System
   • Group Name(s)
   • Application Type
   • Publisher
   • Event Action
   • Application Group Name
   • Message Name
   • Elevation Method
   • On Demand
   • Drive Type
   • Workstyle Name
   • Policy Name

Add an application to a policy

📘

You can only add an application to an unlocked policy.

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. From the top left of the page, click > Endpoint Privilege Management for Windows and Mac > Analytics. The Analytics page displays.
3. Click Applications.
   The Applications page displays.
4. Locate the application you want to add to a policy.
5. In the application row, click .
   The Application panel displays.
6. Select an unlocked policy and available application group from the drop-down list.
7. Click Add and Edit Policy.
   The Policy Editor opens and the Applications Group page displays.
8. Edit the application settings.
9. Click Save Changes.
   The policy saves.

View an application's details

👍

Best practices

Use the application details to:

• View how often an application runs in your estate and the associated behavior at the end user level (for example, how often an event action occurred for an application over a given time period).
• View the number of users running an application, the reason given if one is required, all associated events, and metadata (such as versions run, application type, etc.).
• View event details specific to the application.

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. From the top left of the page, click > Endpoint Privilege Management for Windows and Mac > Analytics. The Analytics page displays.
3. Click Applications.
   The Applications page displays.
4. Locate the application you want to view.
5. Click the Application Description.
   The Application Details page displays is where you can review at-a-glance user and event activity. If there is more than one version of an application, expand the Application Description and click the link for a specific version to view the associated activity.
6. Optionally, click the User Activity or Events tabs to display additional details for each logged user or event activity.

Export to CSV

Click the Download icon to export all analytics data results in the currently filtered result set. When downloading from the Applications page:

• Includes up to 10,000 rows.
• Exports only child rows which includes all application versions.
• Downloads only the current page. For example, if 25 items are selected on the page, you only see the child rows for the items on the current page).
• Exports all columns.

Save and load views

Recommended views

The recommended views provide a selection of the most useful predetermined views. Use the views to review collected data and make informed decisions around policy editing.

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. From the top left of the page, click > Endpoint Privilege Management for Windows and Mac > Analytics. The Analytics page displays.
3. Click Applications.
   The Applications page displays.
4. Click Load View, and then click the Recommended Views tab.

Recommended views for applications load with the default filters.