Cisco Unified Intelligence Center now supports Audit Trail Logging. This feature allows you to view the sequence of audit records of each transaction or action that you perform on a Unified Intelligence Center server. You can view the audit trails using the Audit Trail stock report. Only system administrators can access and view this feature by default. However, a system administrator can then give permissions to other Intelligence Center users to use this feature.
The Resource Ownership and Access report provides information about access rights of users and about ownership status of users who use Unified Intelligence Center resources such as Dashboards, Reports, and other resources.
Current fields in the Report
Current fields are those fields that appear by default in a report grid view generated from the stock template.
Column (Field)
Description
Owner
User ID of the resource
owner
Resource Type
Type of Unified Intelligence Center resource such as Collection, Dashboard, Data Source, Report, Report Definition, and Value List
Resource
Name of an instance of a Resource Type
User
User ID that has access to this resource
Permissions:Execute
Rights to run the resource
Permissions:Write
Rights to modify the resource
Value List
The report definition uses the following value lists: CUIC Users and CUIC Resource Types
Views
This report has one grid view: Grouped by Owner, Resource Type and Resource, sorted by Owner
Access Details Report for Groups
The Access Details Report for Groups report provides information about access rights of groups that use Unified Intelligence Center resources such as Dashboards, Reports, and other resources.
Current fields in Access Details Report for Groups
Current fields are those fields that appear by default in a report grid view generated from the stock template.
Column (Field)
Description
Group
Name of the group
Resource Type
Type of Unified Intelligence Center resource such as Collection, Dashboard, Data Source, Report, Report Definition, Schedule, and Value List
Resource
Name of an instance of a Resource Type
Permissions:Execute
Rights to run the resource
Permissions:Write
Rights to modify the resource
The Resource Type Schedule is not applicable for the Access Details Report for Groups report for 9.0(1) release.
Value List
The report definition uses the following value lists: CUIC Groups and CUIC Resource Types
Views
This report has one grid view: Grouped by Group name and Resource Type and sorted by Group
Audit Trail Report
Views: This report has three grid views: Non-grouped, Groupby –EntityName, Groupby –Username.
Grouping: This report has two grouped views: grouped and sorted by User and Entity Name. The third view is un-grouped, which is also the default view for this report.
Value List: Unified Intelligence Center Users, Unified Intelligence Center Operations, Unified Intelligence Center Entity Types.
Database Schema Tables from which data is retrieved:
Current fields are those fields that appear by default in a report grid view generated from the stock template. You can change them.
Current fields are listed here in the order (left to right) in which they appear by default in the stock template.
Column (Field)
Description
Event Time
The date and time when the user performed the operation in the Unified Intelligence Center system.
Derived from cuicauditlog.loggedtime.
User
Domain name and the Login ID of the user who logged in.
Derived from cuicauditlog.userid.
Operation
The action that the user performed on the system.
Derived from: cuicauditlog.operation.
Entity Type
The type of entity on which the user performed the action.
Derived from: cuicauditlog.category.
Entity Name
The name of the specific entity that the user accessed.
Derived from: cuiclogedentity.entityname.
Status
The outcome of the user operation.
Derived from cuicauditlog.status.
Description
A brief description of the action that the user performed.
Derived from cuicauditlog.description.
RunAs User
The RunAs User for this action.
Derived from cuicauditlog.runasuserid.
Server IP
The IP address of the Unified Intelligence Center system that ths user accessed.
Derived from cuicauditlog.serverip.
Server Name
The name of the Unified Intelligence Center system that ths user accessed.
Derived from cuicauditlog.servername.
Sample Audit Trail Report
Figure 1. Sample Audit Trail Report. This illustration is a sample of the report generated from the Audit Trail Report template.
View Audit Trail Logging in Unified Intelligence Center
Follow this procedure to view the Audit Trail Logging.
Procedure
Step 1
Log in to the Unified Intelligence Center Reporting Interface.
Step 2
Navigate to Reports > Stock > Intelligence Center Admin and click Audit Trail.
The system opens the Audit Trail Report Filter window.
Resource Ownership and Access Report
The Resource Ownership and Access report provides information about access rights of users and about ownership status of users who use Unified Intelligence Center resources such as Dashboards, Reports, and other resources.
Current fields in the Report
Current fields are those fields that appear by default in a report grid view generated from the stock template.
Column (Field)
Description
Owner
User ID of the resource
owner
Resource Type
Type of Unified Intelligence Center resource such as Collection, Dashboard, Data Source, Report, Report Definition, and Value List
Resource
Name of an instance of a Resource Type
User
User ID that has access to this resource
Permissions:Execute
Rights to run the resource
Permissions:Write
Rights to modify the resource
Value List
The report definition uses the following value lists: CUIC Users and CUIC Resource Types
Views
This report has one grid view: Grouped by Owner, Resource Type and Resource, sorted by Owner
Access Details Report for Groups
The Access Details Report for Groups report provides information about access rights of groups that use Unified Intelligence Center resources such as Dashboards, Reports, and other resources.
Current fields in Access Details Report for Groups
Current fields are those fields that appear by default in a report grid view generated from the stock template.
Column (Field)
Description
Group
Name of the group
Resource Type
Type of Unified Intelligence Center resource such as Collection, Dashboard, Data Source, Report, Report Definition, Schedule, and Value List
Resource
Name of an instance of a Resource Type
Permissions:Execute
Rights to run the resource
Permissions:Write
Rights to modify the resource
The Resource Type Schedule is not applicable for the Access Details Report for Groups report for 9.0(1) release.
Value List
The report definition uses the following value lists: CUIC Groups and CUIC Resource Types
Views
This report has one grid view: Grouped by Group name and Resource Type and sorted by Group
Audit Trail Report
Views: This report has three grid views: Non-grouped, Groupby –EntityName, Groupby –Username.
Grouping: This report has two grouped views: grouped and sorted by User and Entity Name. The third view is un-grouped, which is also the default view for this report.
Value List: Unified Intelligence Center Users, Unified Intelligence Center Operations, Unified Intelligence Center Entity Types.
Database Schema Tables from which data is retrieved: