Report Template Reference Guide For Cisco Unified Intelligence Center, Release 9.0(2)
Intelligence Center Admin
Downloads: This chapterpdf (PDF - 1.23MB) The complete bookPDF (PDF - 7.42MB) | Feedback

Intelligence Center Admin

Intelligence Center Admin

Cisco Unified Intelligence Center now supports Audit Trail Logging. This feature allows you to view the sequence of audit records of each transaction or action that you perform on a Unified Intelligence Center server. You can view the audit trails using the Audit Trail stock report. Only system administrators can access and view this feature by default. However, a system administrator can then give permissions to other Intelligence Center users to use this feature.

Resource Ownership and Access Report

The Resource Ownership and Access report provides information about access rights of users and about ownership status of users who use Unified Intelligence Center resources such as Dashboards, Reports, and other resources.

Current fields in the Report

Current fields are those fields that appear by default in a report grid view generated from the stock template.

Column (Field) Description
Owner User ID of the resource owner
Resource Type Type of Unified Intelligence Center resource such as Collection, Dashboard, Data Source, Report, Report Definition, and Value List
Resource Name of an instance of a Resource Type
User User ID that has access to this resource
Permissions:Execute Rights to run the resource
Permissions:Write Rights to modify the resource

Value List

The report definition uses the following value lists: CUIC Users and CUIC Resource Types

Views

This report has one grid view: Grouped by Owner, Resource Type and Resource, sorted by Owner

Access Details Report for Groups

The Access Details Report for Groups report provides information about access rights of groups that use Unified Intelligence Center resources such as Dashboards, Reports, and other resources.

Current fields in Access Details Report for Groups

Current fields are those fields that appear by default in a report grid view generated from the stock template.

Column (Field) Description
Group Name of the group
Resource Type Type of Unified Intelligence Center resource such as Collection, Dashboard, Data Source, Report, Report Definition, Schedule, and Value List
Resource Name of an instance of a Resource Type
Permissions:Execute Rights to run the resource
Permissions:Write Rights to modify the resource

The Resource Type Schedule is not applicable for the Access Details Report for Groups report for 9.0(1) release.

Value List

The report definition uses the following value lists: CUIC Groups and CUIC Resource Types

Views

This report has one grid view: Grouped by Group name and Resource Type and sorted by Group

Audit Trail Report

Views: This report has three grid views: Non-grouped, Groupby –EntityName, Groupby –Username.

Grouping: This report has two grouped views: grouped and sorted by User and Entity Name. The third view is un-grouped, which is also the default view for this report.

Value List: Unified Intelligence Center Users, Unified Intelligence Center Operations, Unified Intelligence Center Entity Types.

Database Schema Tables from which data is retrieved:
  • CUICAUDITLOG
  • CUICLOGEDENTITY

Current Fields in Audit Trail Report Grid View

Current fields are those fields that appear by default in a report grid view generated from the stock template. You can change them.

Current fields are listed here in the order (left to right) in which they appear by default in the stock template.

Column (Field) Description

Event Time

The date and time when the user performed the operation in the Unified Intelligence Center system.

Derived from cuicauditlog.loggedtime.

User

Domain name and the Login ID of the user who logged in.

Derived from cuicauditlog.userid.

Operation

The action that the user performed on the system.

Derived from: cuicauditlog.operation.

Entity Type

The type of entity on which the user performed the action.

Derived from: cuicauditlog.category.

Entity Name

The name of the specific entity that the user accessed.

Derived from: cuiclogedentity.entityname.

Status

The outcome of the user operation.

Derived from cuicauditlog.status.

Description

A brief description of the action that the user performed.

Derived from cuicauditlog.description.

RunAs User

The RunAs User for this action.

Derived from cuicauditlog.runasuserid.

Server IP

The IP address of the Unified Intelligence Center system that ths user accessed.

Derived from cuicauditlog.serverip.

Server Name

The name of the Unified Intelligence Center system that ths user accessed.

Derived from cuicauditlog.servername.

Sample Audit Trail Report

Figure 1. Sample Audit Trail Report. This illustration is a sample of the report generated from the Audit Trail Report template.



View Audit Trail Logging in Unified Intelligence Center

Follow this procedure to view the Audit Trail Logging.

Procedure
    Step 1   Log in to the Unified Intelligence Center Reporting Interface.
    Step 2   Navigate to Reports > Stock > Intelligence Center Admin and click Audit Trail.

    The system opens the Audit Trail Report Filter window.


    Resource Ownership and Access Report

    The Resource Ownership and Access report provides information about access rights of users and about ownership status of users who use Unified Intelligence Center resources such as Dashboards, Reports, and other resources.

    Current fields in the Report

    Current fields are those fields that appear by default in a report grid view generated from the stock template.

    Column (Field) Description
    Owner User ID of the resource owner
    Resource Type Type of Unified Intelligence Center resource such as Collection, Dashboard, Data Source, Report, Report Definition, and Value List
    Resource Name of an instance of a Resource Type
    User User ID that has access to this resource
    Permissions:Execute Rights to run the resource
    Permissions:Write Rights to modify the resource

    Value List

    The report definition uses the following value lists: CUIC Users and CUIC Resource Types

    Views

    This report has one grid view: Grouped by Owner, Resource Type and Resource, sorted by Owner

    Access Details Report for Groups

    The Access Details Report for Groups report provides information about access rights of groups that use Unified Intelligence Center resources such as Dashboards, Reports, and other resources.

    Current fields in Access Details Report for Groups

    Current fields are those fields that appear by default in a report grid view generated from the stock template.

    Column (Field) Description
    Group Name of the group
    Resource Type Type of Unified Intelligence Center resource such as Collection, Dashboard, Data Source, Report, Report Definition, Schedule, and Value List
    Resource Name of an instance of a Resource Type
    Permissions:Execute Rights to run the resource
    Permissions:Write Rights to modify the resource

    The Resource Type Schedule is not applicable for the Access Details Report for Groups report for 9.0(1) release.

    Value List

    The report definition uses the following value lists: CUIC Groups and CUIC Resource Types

    Views

    This report has one grid view: Grouped by Group name and Resource Type and sorted by Group

    Audit Trail Report

    Views: This report has three grid views: Non-grouped, Groupby –EntityName, Groupby –Username.

    Grouping: This report has two grouped views: grouped and sorted by User and Entity Name. The third view is un-grouped, which is also the default view for this report.

    Value List: Unified Intelligence Center Users, Unified Intelligence Center Operations, Unified Intelligence Center Entity Types.

    Database Schema Tables from which data is retrieved:
    • CUICAUDITLOG
    • CUICLOGEDENTITY

    Current Fields in Audit Trail Report Grid View

    Current fields are those fields that appear by default in a report grid view generated from the stock template. You can change them.

    Current fields are listed here in the order (left to right) in which they appear by default in the stock template.

    Column (Field) Description

    Event Time

    The date and time when the user performed the operation in the Unified Intelligence Center system.

    Derived from cuicauditlog.loggedtime.

    User

    Domain name and the Login ID of the user who logged in.

    Derived from cuicauditlog.userid.

    Operation

    The action that the user performed on the system.

    Derived from: cuicauditlog.operation.

    Entity Type

    The type of entity on which the user performed the action.

    Derived from: cuicauditlog.category.

    Entity Name

    The name of the specific entity that the user accessed.

    Derived from: cuiclogedentity.entityname.

    Status

    The outcome of the user operation.

    Derived from cuicauditlog.status.

    Description

    A brief description of the action that the user performed.

    Derived from cuicauditlog.description.

    RunAs User

    The RunAs User for this action.

    Derived from cuicauditlog.runasuserid.

    Server IP

    The IP address of the Unified Intelligence Center system that ths user accessed.

    Derived from cuicauditlog.serverip.

    Server Name

    The name of the Unified Intelligence Center system that ths user accessed.

    Derived from cuicauditlog.servername.

    Sample Audit Trail Report

    Figure 2. Sample Audit Trail Report. This illustration is a sample of the report generated from the Audit Trail Report template.



    View Audit Trail Logging in Unified Intelligence Center

    Follow this procedure to view the Audit Trail Logging.

    Procedure
      Step 1   Log in to the Unified Intelligence Center Reporting Interface.
      Step 2   Navigate to Reports > Stock > Intelligence Center Admin and click Audit Trail.

      The system opens the Audit Trail Report Filter window.


      Current Fields in Audit Trail Report Grid View

      Current fields are those fields that appear by default in a report grid view generated from the stock template. You can change them.

      Current fields are listed here in the order (left to right) in which they appear by default in the stock template.

      Column (Field) Description

      Event Time

      The date and time when the user performed the operation in the Unified Intelligence Center system.

      Derived from cuicauditlog.loggedtime.

      User

      Domain name and the Login ID of the user who logged in.

      Derived from cuicauditlog.userid.

      Operation

      The action that the user performed on the system.

      Derived from: cuicauditlog.operation.

      Entity Type

      The type of entity on which the user performed the action.

      Derived from: cuicauditlog.category.

      Entity Name

      The name of the specific entity that the user accessed.

      Derived from: cuiclogedentity.entityname.

      Status

      The outcome of the user operation.

      Derived from cuicauditlog.status.

      Description

      A brief description of the action that the user performed.

      Derived from cuicauditlog.description.

      RunAs User

      The RunAs User for this action.

      Derived from cuicauditlog.runasuserid.

      Server IP

      The IP address of the Unified Intelligence Center system that ths user accessed.

      Derived from cuicauditlog.serverip.

      Server Name

      The name of the Unified Intelligence Center system that ths user accessed.

      Derived from cuicauditlog.servername.

      Sample Audit Trail Report

      Figure 3. Sample Audit Trail Report. This illustration is a sample of the report generated from the Audit Trail Report template.



      View Audit Trail Logging in Unified Intelligence Center

      Follow this procedure to view the Audit Trail Logging.

      Procedure
        Step 1   Log in to the Unified Intelligence Center Reporting Interface.
        Step 2   Navigate to Reports > Stock > Intelligence Center Admin and click Audit Trail.

        The system opens the Audit Trail Report Filter window.