Report Template Reference Guide For Cisco Unified Intelligence Center, Release 9.0(2)
Intelligence Center Admin
Downloads: This chapterpdf (PDF - 1.23 MB) The complete bookPDF (PDF - 7.41 MB) | The complete bookePub (ePub - 3.78 MB) | The complete bookMobi (Mobi - 6.36 MB) | Feedback

Intelligence Center Admin

Intelligence Center Admin

Cisco Unified Intelligence Center now supports Audit Trail Logging. This feature allows you to view the sequence of audit records of each transaction or action that you perform on a Unified Intelligence Center server. You can view the audit trails using the Audit Trail stock report. Only system administrators can access and view this feature by default. However, a system administrator can then give permissions to other Intelligence Center users to use this feature.

Resource Ownership and Access Report

The Resource Ownership and Access report provides information about access rights of users and about ownership status of users who use Unified Intelligence Center resources such as Dashboards, Reports, and other resources.

Current fields in the Report

Current fields are those fields that appear by default in a report grid view generated from the stock template.

Column (Field) Description
Owner User ID of the resource owner
Resource Type Type of Unified Intelligence Center resource such as Collection, Dashboard, Data Source, Report, Report Definition, and Value List
Resource Name of an instance of a Resource Type
User User ID that has access to this resource
Permissions:Execute Rights to run the resource
Permissions:Write Rights to modify the resource

Value List

The report definition uses the following value lists: CUIC Users and CUIC Resource Types

Views

This report has one grid view: Grouped by Owner, Resource Type and Resource, sorted by Owner

Access Details Report for Groups

The Access Details Report for Groups report provides information about access rights of groups that use Unified Intelligence Center resources such as Dashboards, Reports, and other resources.

Current fields in Access Details Report for Groups

Current fields are those fields that appear by default in a report grid view generated from the stock template.

Column (Field) Description
Group Name of the group
Resource Type Type of Unified Intelligence Center resource such as Collection, Dashboard, Data Source, Report, Report Definition, Schedule, and Value List
Resource Name of an instance of a Resource Type
Permissions:Execute Rights to run the resource
Permissions:Write Rights to modify the resource

The Resource Type Schedule is not applicable for the Access Details Report for Groups report for 9.0(1) release.

Value List

The report definition uses the following value lists: CUIC Groups and CUIC Resource Types

Views

This report has one grid view: Grouped by Group name and Resource Type and sorted by Group

Audit Trail Report

Views: This report has three grid views: Non-grouped, Groupby –EntityName, Groupby –Username.

Grouping: This report has two grouped views: grouped and sorted by User and Entity Name. The third view is un-grouped, which is also the default view for this report.

Value List: Unified Intelligence Center Users, Unified Intelligence Center Operations, Unified Intelligence Center Entity Types.

Database Schema Tables from which data is retrieved:
  • CUICAUDITLOG

  • CUICLOGEDENTITY

Current Fields in Audit Trail Report Grid View

Current fields are those fields that appear by default in a report grid view generated from the stock template. You can change them.

Current fields are listed here in the order (left to right) in which they appear by default in the stock template.

Column (Field) Description

Event Time

The date and time when the user performed the operation in the Unified Intelligence Center system.

Derived from cuicauditlog.loggedtime.

User

Domain name and the Login ID of the user who logged in.

Derived from cuicauditlog.userid.

Operation

The action that the user performed on the system.

Derived from: cuicauditlog.operation.

Entity Type

The type of entity on which the user performed the action.

Derived from: cuicauditlog.category.

Entity Name

The name of the specific entity that the user accessed.

Derived from: cuiclogedentity.entityname.

Status

The outcome of the user operation.

Derived from cuicauditlog.status.

Description

A brief description of the action that the user performed.

Derived from cuicauditlog.description.

RunAs User

The RunAs User for this action.

Derived from cuicauditlog.runasuserid.

Server IP

The IP address of the Unified Intelligence Center system that ths user accessed.

Derived from cuicauditlog.serverip.

Server Name

The name of the Unified Intelligence Center system that ths user accessed.

Derived from cuicauditlog.servername.

Sample Audit Trail Report

Figure 1. Sample Audit Trail Report. This illustration is a sample of the report generated from the Audit Trail Report template.



View Audit Trail Logging in Unified Intelligence Center

Follow this procedure to view the Audit Trail Logging.

Procedure
    Step 1   Log in to the Unified Intelligence Center Reporting Interface.
    Step 2   Navigate to Reports > Stock > Intelligence Center Admin and click Audit Trail.

    The system opens the Audit Trail Report Filter window.