Skip to main content

System operation reports

Notification

Purpose: Information about configured user notification policies in the Bravura Pass notification subsystem.

Executable: notification

Table 1. Notification report search criteria

Criteria

Description

Notification type

Select from:

  • All notifications

  • Active notifications

  • Inactive notifications

    Searches for inactive notifications take no other search parameters, and always return the full list of notifications which have been deactivated, or deleted.

Notification ID

Type the ID of a notification to list that notification and its related settings. All notification IDs are selected by default.

Notification description

Type the description of a notification to list that notification and its related settings.

Severity

Select one or more levels of severity to only list notifications set to the specified levels. All levels are selected by default.

Compliance plugin

Type the name of the compliance plugin to only list notifications that trigger that plugin. All notification plugins are selected by default.

Reminder plugin

Type the name of the reminder plugin to only list notifications that trigger that plugin. All notification plugins are selected by default.

Action plugin

Type the name of the action plugin to only list notifications that trigger that plugin. All notification plugins are selected by default.

Batch plugin

Type the name of the batch plugin to only list notifications that trigger that plugin. All notification plugins are selected by default.



Users qualifying for notifications

Purpose: Shows users whose profiles warrant notification as per policy.

Executable: userqualify

Table 2. Users qualifying for notifications report search criteria

Criteria

Description

Batch notifications

Select one or more batch notification IDs. All notifications are selected by default.

Web notifications

Select one or more web notification IDs. All notifications are selected by default.

Number of users to display

Type the number of qualifying users to display.



SSO session activity

Purpose: Summary of SSO session activity.

Executable: ssoactivity

Table 3. SSO session activity report search criteria

Criteria

Description

User ID

Type a profile ID to only list synchronization events that apply to that user. Alternatively, you can search for one or more profile IDs.

Requester ID

Type a profile ID to only list synchronization events requested by that user. Alternatively, you can search for one or more profile IDs.

Choose date range

Define a date range.



Sent notifications

Purpose: To report messages sent by the Bravura Pass notification subsystem.

Executable: usernotif

Table 4. Sent notifications report search criteria

Criteria

Description

Notification type

Select which notification types to include in the report:

  • All notifications : includes both active and deleted notifications.

  • Active notifications : only includes active notifications.

  • Inactive notifications : only includes inactive notifications.

Notification ID

Select one or more user notification IDs. All notifications are selected by default. This field is not displayed if there is no data available.

User ID

Type the profile ID of the user for whom you want to generate the report. Alternatively, you can search for one or more profile IDs. All users are selected by default.

Status

Select one or more statuses to only list notification events for users who have been placed in that status in the usernotif table:

  • Unknown : An error occurred, there is something wrong.

  • Reminded : Notification has been sent, user has not yet resolved.

  • On hold : If the notification configuration defines any "Do not send ..." period, or any pre-conditions are set to exclude. For challenge and response notifications, the notification may not be set up properly.

  • Implemented : Sent notification has been resolved by the user.

  • Expired : User did not respond, did not resolve and notification has expired.

Last reminder time

Define a date range for the last reminder time.

Report type

Choose from the drop-down list. The Detailed setting is used by default.

  • Detailed : Creates a detailed report.

  • Users without notifications : Report includes users who qualify for notifications but have not yet received any.

  • Summary by notification ID : Creates a summarized report, organized by notification ID.

Graph type

Specify the type of graph for a visual representation of the data. The available graph type is a vertical bar chart. This field is only visible when the report type "Summary by notification ID" is selected.



Daily notification statistics

Purpose: Summary of messages sent per day.

Executable: usernotifstats

Table 5. Daily notification statistics report search criteria

Criteria

Description

Notification type

Select which notification types to include in the report:

  • All notifications : includes both active and deleted notifications.

  • Active notifications : only includes active notifications.

  • Inactive notifications : only includes inactive notifications.

Notification ID

Select one or more user notification IDs. All notifications are selected by default. This field is not displayed if there is no data available.

User ID

Type a user ID that matches the user for which you want to report events. Alternatively, you can search for one or more profile IDs.

Last reminder time

Define a date range for the last reminder time.

Show detailed report

Select this checkbox to display additional report details.

Graph type

Specify the type of graph for a visual representation of the data. The available graph type is horizontal bar chart. This field is only visible when the detailed report type is not selected.

Number of rows for graph

The number of notification IDs to display. The maximum number of rows that can be displayed is 100. This field is only visible when the graph type is horizontal bar chart.



Click below to view a demonstration of configuring, scheduling and emailing a Daily Notification Statistics Report.

Event log

Purpose: To report events that have occurred in Bravura Security Fabric within a defined time period.

Executable: operations

Table 6. Event log report search criteria

Criteria

Description

Node ID

Select the replication/shared schema nodes that you want to include. All nodes are included by default.

This option is only displayed if there are multiple nodes in the environment; for example, with replication or shared schema configurations.

Result

Select:

  • (All): to include all events, regardless of their outcomes.

  • Success : to only include successful events.

  • Failure : to only include failed events.

Show only help desk events

Select this checkbox to only display events triggered by help desk users and to change the list of operations into the list of help desk operations accordingly.

Operation

Select the operations that you want to include. By default, all operations available with the current Bravura Security Fabric license are included.

Target system ID

Type a comma-and-space-delimited list of target system IDs for which you want to run the report. All target systems are included by default. Alternatively, you can search for one or more target systems.

Target system type

Select the target types to include. All target types are included by default.

This field is not displayed if there is no data available.

Target system group

Select one or more target system groups to include in the report. The list includes only target system groups in use with the instance.

This field is not displayed if there is no data available.

Template accounts

Type one or more template accounts to include in the report.

Roles

Type one or more roles to include in the report.

Segregation of duties rules

Type one or more SoD rules to include in the report.

Group ID

Type the ID of one or more groups to include in the report. Alternatively, you can search for one or more groups.

Session log identifier

Type an identifier to include.

By default, this is the IP address of the user who initiated the event. Other information may be specified by the SESSION IDENT PLUGIN .

User ID

Type a user ID that matches the user for which you want to report events. Alternatively, you can search for one or more profile IDs.

Requester ID

Type a profile ID that matches the users you want to include, where the requester is the user that initiated the event. Alternatively, you can search for one or more profile IDs.

Request ID

Type the ID of the request for which you want to run the report.

Requester is a product administrator

Select this checkbox to only display events triggered by a product administrator.

Choose date range

Define a date range.

Show each detailed event

Select this checkbox to display details about each event, rather than a count of successful events and failed events.



Instance customizations

Purpose: List exit (event trigger) programs, customized binaries, scripts, plugins, and external programs so that you can assess what needs to be changed during an upgrade.

Executable: psuat

Table 7. Instance customizations report search criteria

Criteria

Description

Customizations for

Select from the following:

  • System table custom programs : all external programs or plugins set in Bravura Security Fabric .

  • Scheduled programs : programs set in the Manage the system > Maintenance > Scheduled jobs .

  • Password policy custom programs : plugin programs set in Manage the system > Policies > Password policies .

  • External question sets custom programs : external question sets programs set in Manage the system > Policies > Question sets > External questions .

  • Target system custom programs : programs set in Manage the system > Resources > Target systems.

  • Customized .dll and .exe binaries : all custom binaries and dll files in the \<instance>\ directory.

  • Customized M4 files : all customized user interface files in the \<instance>\design\custom\ directory.



Self service password changes

Purpose: Reports on users that have performed self-service password changes and includes information such as password change date and which login method was used.

Executable: selfservicereset

Table 8. Self service password changes report search criteria

Criteria

Description

User ID

Type the profile ID of the user for whom you want to generate the report. Alternatively, you can search for one or more profile IDs.

User name

Type the full name of the user for whom you want to generate the report.

Login method

Select one or more login methods to include in the report.

Password change date

Define a date range for the password change.

Report type

Select the report type:

  • Detailed : The report output lists users and all their password changes, including login method and date/time of password changes.

  • Summary by user and login method : The report output lists users and the number of self-service password changes for each login method they used.

  • Summary by login method : The report output lists the number of password changes for each login method.

  • Summary by target system : The report output lists users and the number of password changes for each target system.

  • Summary by user per reset : The report output lists users and self-service password changes by time stamp.

  • Summary by user : The report output lists all self-service password changes by individual users.

Graph type

Select the graph type:

  • (None): No graph generated

  • Vertical bar chart : bar chart will be generated

  • Pie chart : a pie chart will be generated

This option is only shown when Summary by login method is selected as the report type.



Session activity

Purpose: Login, self-service, usage monitoring and other useful statistics.

The reports list a total count of actions, and a distinct count of the users who acted; for example the password authentication report lists the total count of authentication attempts, and the number of users who have attempted to use a password to authenticate.

Executable: sesslog

Table 9. Session activity report search criteria

Criteria

Description

Session activity

Select the types of session activity that you want to add to the report output:

  • Login statistics : report on users who have logged into Bravura Security Fabric using:

    • Login Chain Authentication

    • Password authentication

    • Security questions authentication

    • SecurID token authentication

    • Radius pass-code authentication

    • Email/SMS authentication

  • Self-service statistics : report on users who used self-service modules for:

    • Password changes: Change passwords (pss) module

    • Security questions profile builder (not including external question sets): Update security questions (psq) module

    • SecurID token management: Manage tokens (psp) module

    • Active registration for synchronization: Password synchronization registration (psr) module

  • Other statistics including :

    • Alternate login ID profile updates: help-desk updates via the Help users (ida) module and self-service updates via the Attach other accounts (psl) module

    • Help desk password changes: help desk users changing password on behalf of recipients

    • Transparent password synchronization: Password changes via the Password Manager service (idpm )

    • Lockouts and disabled users

  • Usage monitoring :

    • User summary

    • Active users

    • Inactive users

Choose date range

Define a date range.



Synchronization

Purpose: Displays results of password synchronization of accounts across target systems.

Executable: synchronization

Table 10. Synchronization report search criteria

Criteria

Description

User ID

Type a profile ID to only list synchronization events that apply to that user. Alternatively, you can search for one or more profile IDs.

Account

Type an account ID to only list synchronization events that apply to that account. All accounts are selected by default.

Target system ID

Type a comma-and-space-delimited list of target system IDs for which you want to run the report. All target systems are included by default. Alternatively, you can search for one or more target systems.

Target system description

Type a description to only list synchronization events from target systems that match that description. All target systems are selected by default.

Target system type

Select one or more target system types to only include events from your selections. All target system types are selected by default.

This field is not displayed if there is no data available.

Target system group

Select one or more target system groups from the list of configured target system groups. All groups are selected by default.

This field is not displayed if there is no data available.

Synchronization status

Choose from the drop-down list.

Select:

  • Current : to generate a report on passwords currently queued for transparent password synchronization.

  • Success : to generate a report on successful transparent password synchronization.

  • Failure : to generate a report on failed transparent synchronization.

Choose start date

Define a date range during which the request was accepted.

Choose end date

Define a date range during which the request was last acted upon.



If you do not specify any search criteria, the report output includes failed and currently queued sync operations for all target systems and users.

Click below to view a demonstration of scheduling a weekly failed transparent synchronization events report.

Scheduled jobs

Purpose: Shows configured scheduled jobs to run in the future.

Executable: schedjobs

Table 11. Scheduled jobs report search criteria

Criteria

Description

Job

Type the job ID of one or more scheduled jobs to only include those jobs in the report.

Enabled

Select a value to only include schedule jobs with a matching status.

Schedule type

Select a value to only include scheduled jobs with a matching schedule type.

Server

The server on which the scheduled job is added.

Saved configuration ID

Type a saved certification configuration ID to only display scheduled jobs for certification that are based on the saved configuration. Alternatively, you can search for one or more saved certification configuration IDs.

Filter results by last run date

Define a date range during which the scheduled job was last run.



User session activity

Purpose: Reports on operations performed by user per login session.

Executable: useractivity

Criteria

Description

User ID

Type a profile ID to only list synchronization events that apply to that user. Alternatively, you can search for one or more profile IDs.

Requester ID

Type a profile ID to only list synchronization events requested by that user. Alternatively, you can search for one or more profile IDs.

Choose date range

Define a date range.

Saved reports statistics

Purpose: File system usage of saved reports.

Lists users who have saved reports, as well as the information about the reports they have saved and the space usage by each report or by each user.

Executable: savedreportquota

Table 12. Saved reports statistics report search criteria

Criteria

Description

User ID

Type the profile ID of the user for whom you want to generate the report. Alternatively, you can search for one or more profile IDs.

User name

Type the full name of the user for whom you want to generate the report.

Report expiry time

Define a date range for the report expiry time.

Exceeded quota users only

Select this checkbox to display only the reports saved by users who have exceeded their space quota limit

Summarize report

Select this checkbox to summarize the report details. When selected, the report expiry time search criteria will not be available.

In this mode, the report includes the User ID, User Name, Number of saved reports and Total space used in megabytes.

Graph type

Select the graph type:

  • (None): No graph generated

  • Horizontal bar chart : bar chart will be generated

This option is only shown when Summarize report is checked.

Number of rows for graph

The maximum rows for graph to display. The selected rows will be displayed with the number of requests in descending order. The maximum numbers of rows that can be displayed is 100.



Performance metrics

Purpose: To describes the rate of various core Bravura Security Fabric actions.

Executable: performancemetrics

Table 13. Performance metrics report search criteria

Criteria

Description

Performance metrics type

Select the report type:

  • General performance metrics : The performance metrics of various Bravura Security Fabric activities.

  • Workflow performance metrics : The performance metrics of pre-defined requests.

  • Authentication performance metrics : The performance metrics of authentication chains.

General performance metrics

Select a type of the performance requests to list. This option will only show when General performance metrics is selected.

Workflow performance metrics

Select a type of the request statuses from all pre-defined requests. This option will only show when Workflow performance metrics is selected.

Authentication performance metrics

Select a type of the request statuses from all pre-defined requests. This option will only show when Authentication performance metrics is selected.

Display subtotals

Select from different subtotal interval.

  • No subtotals

  • Subtotal by minute

  • Subtotal by hour

  • Subtotal by day

  • Subtotal by week

  • Subtotal by month

  • Subtotal by quarter

  • Subtotal by year

Choose date range

Define a date range.



Skin / Language pack utilization

Purpose: Provides skin and language pack utilization information within a specified time period in a summarized or detailed report to show which skins and languages have been used to login to the instance.

Executable: languagepackutilization

Table 14. Skin / Language pack utilization

Criteria

Description

Skin

Skin utilization information within a specified time period. Select one or more skins to include in the report.

The list includes only the installed skins have been used to successfully login to the instance.

The default skin in the list is the default skin compiled for the instance.

Language

Language pack utilization information within a specified time period. Select one or more language packs to include in the report.

The list includes only the installed language packs that have been used to successfully login to the instance.

The default language pack in the list is United States English (EN-US).

Choose date range

Define a date range.

Report type

Choose one of the following to determine which type of report to run.

  • (All): This is the default setting to run the report for both the skins and language packs.

  • Skin : Include only the skin utilization in the report.

  • Language : Include only the language pack utilization in the report.

Show detailed report

The default is to have this option unchecked to show the summary report. Only the total number of users and sessions will be shown for the selected skins and languages that were used to login to the instance.

When this option checked, a more detailed report will be shown to show which specific languages have been used for each of the selected skins and alternatively which specific skins have been used for each of the selected languages to login to the instance.

Graph type

Select the graph type:

  • (None): No graph generated

  • Pie chart : a pie chart will be generated

This option is only shown when Show detailed report is not selected and "All" is not selected as the report type.



User and service metrics

Purpose: Lists user and service statistics.

Executable: userservicemetrics

Table 15. User and service metrics report search criteria

Criteria

Description

Reporting mode

Select a metrics group that you want to add to the report output. The default option is General user and service metrics :

  • General user and service metrics

  • Accounts on each target

  • User and service statistics

Choose date range

Define a date range.



SQL utility history

Purpose: Execution history of sqlutil.py.

Executable: sqlutilityhistory

Table 16. SQL utility history report search criteria

Criteria

Description

Choose date range:

Define a date range.

Script execution status:

Select the script execution status that you want to see to the report output. The default option is All :

  • Success

  • Failed

  • In progress