System operation reports
System operation reports provide visibility into the day-to-day activity and health of your environment.
Demos
Click below to view a demonstration of configuring, scheduling and emailing a Daily Notification Statistics Report.
Click below to view a demonstration of scheduling a weekly failed transparent synchronization events report.
Notification
Purpose: Information about configured user notification policies in the Bravura Pass notification subsystem.
Executable: notification
Criteria | Description |
|---|---|
Notification type | Select from:
|
Notification ID | Type the ID of a notification to list that notification and its related settings. All notification IDs are selected by default. |
Notification description | Type the description of a notification to list that notification and its related settings. |
Severity | Select one or more levels of severity to only list notifications set to the specified levels. All levels are selected by default. |
Compliance plugin | Type the name of the compliance plugin to only list notifications that trigger that plugin. All notification plugins are selected by default. |
Reminder plugin | Type the name of the reminder plugin to only list notifications that trigger that plugin. All notification plugins are selected by default. |
Action plugin | Type the name of the action plugin to only list notifications that trigger that plugin. All notification plugins are selected by default. |
Batch plugin | Type the name of the batch plugin to only list notifications that trigger that plugin. All notification plugins are selected by default. |
Column | Description |
|---|---|
Notification ID | The notification identifier. |
Notification description | The description of the notification. |
Severity | The severity level of the notification. |
Composition plugin | The composition plugin associated with the notification. |
Reminder plugin | The reminder plugin associated with the notification. |
Action plugin | The action plugin associated with the notification. |
Batch plugin | The batch plugin associated with the notification. |
Notification type | The type of notification (batch or web). |
Users qualifying for notifications
Purpose: Shows users whose profiles warrant notification as per policy.
Executable: userqualify
Criteria | Description |
|---|---|
Batch notifications | Select one or more batch notification IDs. All notifications are selected by default. |
Web notifications | Select one or more web notification IDs. All notifications are selected by default. |
Number of users to display | Type the number of qualifying users to display. |
Column | Description |
|---|---|
Notification ID | The notification identifier. |
User ID | The profile ID of the user who qualifies for the notification. |
SSO session activity
Purpose: Summary of SSO session activity.
Executable: ssoactivity
Criteria | Description |
|---|---|
User ID | Type a profile ID to only list synchronization events that apply to that user. Alternatively, you can search for one or more profile IDs. |
Requester ID | Type a profile ID to only list synchronization events requested by that user. Alternatively, you can search for one or more profile IDs. |
Choose date range | Define a date range. |
Column | Description |
|---|---|
Session identifier | The unique session identifier. |
User ID | The profile ID of the user. |
Operation | The SSO operation performed. |
Status | The status of the operation. |
Folder | The SSO folder associated with the operation. |
Initiator | The initiator of the SSO operation. |
Workstation IP address | The IP address of the workstation. |
Active | Whether the session is currently active. |
Time | The date and time of the operation. |
Sent notifications
Purpose: To report messages sent by the Bravura Pass notification subsystem.
Executable: usernotif
Criteria | Description |
|---|---|
Notification type | Select which notification types to include in the report:
|
Notification ID | Select one or more user notification IDs. All notifications are selected by default. This field is not displayed if there is no data available. |
User ID | Type the profile ID of the user for whom you want to generate the report. Alternatively, you can search for one or more profile IDs. All users are selected by default. |
Status | Select one or more statuses to only list notification events for users who have been placed in that status in the usernotif table:
|
Last reminder time | Define a date range for the last reminder time. |
Report type | Choose from the drop-down list. The Detailed setting is used by default.
|
Graph type | Specify the type of graph for visualizing the data. The available graph type is a vertical bar chart. This field is only visible when the report type "Summary by notification ID" is selected. |
The report output depends on the selected report type.
Column | Description |
|---|---|
User ID | The profile ID of the user. Displayed as "User" in drill-down mode. |
Notification ID | The notification identifier. |
Reminders sent | The number of reminders sent to the user. |
Last reminded | The date and time the last reminder was sent. |
Last attempt | The date and time of the last attempt to send the notification. |
Status | The current status of the notification for the user. |
Notification type | The type of notification (batch or web). |
Column | Description |
|---|---|
User ID | The profile ID of the user. |
Notification ID | The notification identifier the user qualifies for. |
Last attempt | The date and time of the last attempt to send the notification. |
Status | The current status of the notification for the user. |
Column | Description |
|---|---|
Notification ID | The notification identifier. |
Users notified | The number of users who received the notification. |
Resolved | The number of users who resolved the notification. |
Failed | The number of users for whom the notification failed. |
Escalated | The number of users for whom the notification was escalated. |
Unresolved | The number of users who have not yet resolved the notification. |
On hold | The number of users for whom the notification is on hold. |
Daily notification statistics
Purpose: Summary of messages sent per day.
Executable: usernotifstats
Criteria | Description |
|---|---|
Notification type | Select which notification types to include in the report:
|
Notification ID | Select one or more user notification IDs. All notifications are selected by default. This field is not displayed if there is no data available. |
User ID | Type a user ID that matches the user for which you want to report events. Alternatively, you can search for one or more profile IDs. |
Last reminder time | Define a date range for the last reminder time. |
Show detailed report | Select this checkbox to display additional report details. |
Graph type | Specify the type of graph for visualizing the data. The available graph type is a horizontal bar chart. This field is only visible when the detailed report type is not selected. |
Number of rows for graph | The number of notification IDs to display. The maximum number of rows that can be displayed is 100. This field is only visible when the graph type is a horizontal bar chart. |
The report output depends on the selected report type.
Column | Description |
|---|---|
Notification date | The date the notification was sent. |
Notification ID | The notification identifier. |
Notification description | The description of the notification. |
User ID | The profile ID of the user. Displayed as "User" in drill-down mode. |
Notifications sent | The number of notifications sent. |
Notification type | The type of notification. |
Column | Description |
|---|---|
Notification ID | The notification identifier. |
Notification description | The description of the notification. |
Notifications sent | The total number of notifications sent. |
Event log
Purpose: To report events that have occurred in Bravura Security Fabric within a defined time period.
Executable: operations
Criteria | Description |
|---|---|
Node ID | Select the replication/shared schema nodes that you want to include. All nodes are included by default. This option is only displayed if there are multiple nodes in the environment; for example, with replication or shared schema configurations. |
Result | Select:
|
Show only help desk events | Select this checkbox to only display events triggered by help desk users and to change the list of operations into the list of help desk operations accordingly. |
Operation | Select the operations that you want to include. By default, all operations available with the current Bravura Security Fabriclicense are included. |
Target system ID | Type a comma-and-space-delimited list of target system IDs for which you want to run the report. All target systems are included by default. Alternatively, you can search for one or more target systems. |
Target system type | Select the target types to include. All target types are included by default. This field is not displayed if there is no data available. |
Target system group | Select one or more target system groups to include in the report. The list includes only target system groups in use with the instance. This field is not displayed if there is no data available. |
Template accounts | Type one or more template accounts to include in the report. |
Roles | Type one or more roles to include in the report. |
Segregation of duties rules | Type one or more SoD rules to include in the report. |
Group ID | Type the ID of one or more groups to include in the report. Alternatively, you can search for one or more groups. |
Session log identifier | Type an identifier to include. By default, this is the IP address of the user who initiated the event. Other information may be specified by the SESSION IDENT PLUGIN . |
User ID | Type a user ID that matches the user for which you want to report events. Alternatively, you can search for one or more profile IDs. |
Requester ID | Type a profile ID that matches the users you want to include, where the requester is the user that initiated the event. Alternatively, you can search for one or more profile IDs. |
Request ID | Type the ID of the request for which you want to run the report. |
Requester is a product administrator | Select this checkbox to only display events triggered by a product administrator. |
Choose date range | Define a date range. |
Show each detailed event | Select this checkbox to display details about each event, rather than a count of successful events and failed events. |
The report output depends on whether "Show each detailed event" is selected.
Column | Description |
|---|---|
Start time | The start time of the event. |
End time | The end time of the event. |
Operation code | The operation code for the event. |
Operation description | The description of the operation. |
User | The profile ID of the user associated with the event. |
Role ID | The role identifier, if applicable. |
SoD rule ID | The segregation of duties rule identifier, if applicable. |
Template ID | The template account identifier, if applicable. |
Target system ID | The target system short identifier. |
Target system description | The target system display name. |
Address | The target system address. |
Group ID | The managed group identifier, if applicable. |
Target system group | The target system group. This column is displayed if Bravura Pass is licensed. |
Managed system policy ID | The managed system policy identifier, if applicable. |
Account long ID | The long account identifier. |
Requested by | The profile ID of the user who initiated the event. |
Results | The result of the event (success or failure). |
Message | Additional information about the event. |
Request ID | The request identifier, if applicable. |
Attribute | The attribute associated with the event, if applicable. |
Identifier | The session log identifier. |
Node ID | The replication or shared schema node identifier. |
Column | Description |
|---|---|
Operation code | The operation code for the event. |
Operation description | The description of the operation. |
Success count | The number of successful events. |
Failure count | The number of failed events. |
Node ID | The replication or shared schema node identifier. |
Instance customizations
Purpose: List exit (event trigger) programs, customized binaries, scripts, plugins, and external programs so that you can assess what needs to be changed during an upgrade.
Executable: psuat
Criteria | Description |
|---|---|
Customizations for | Select from the following:
|
Column | Description |
|---|---|
Statistic | The name of the customization statistic. |
Description | The description of the customization. |
Value | The value of the customization statistic. |
Self service password changes
Purpose: Reports on users that have performed self-service password changes and includes information such as password change date and which login method was used.
Executable: selfservicereset
Criteria | Description |
|---|---|
User ID | Type the profile ID of the user for whom you want to generate the report. Alternatively, you can search for one or more profile IDs. |
User name | Type the full name of the user for whom you want to generate the report. |
Login method | Select one or more login methods to include in the report. |
Password change date | Define a date range for the password change. |
Report type | Select the report type:
|
Graph type | Select the graph type:
This option is only shown when Summary by login method is selected as the report type. |
The report output depends on the selected report type.
Column | Description |
|---|---|
User ID | The profile ID of the user. |
User name | The full name of the user. |
Login method | The login method used for the password change. |
Target system ID | The target system short identifier. |
Target system description | The target system display name. |
Address | The target system address. |
Account ID | The account identifier on the target system. |
Last password change date | The date and time of the last password change. |
Identifier | The session log identifier. |
Column | Description |
|---|---|
Target system ID | The target system short identifier. |
Target system description | The target system display name. |
Last password change date | The date and time of the last password change. |
Reset count | The number of password resets. |
Column | Description |
|---|---|
User ID | The profile ID of the user. |
User name | The full name of the user. |
Login method | The login method used for the password change. |
Last password change date | The date and time of the last password change. |
Reset count | The number of password resets. |
Column | Description |
|---|---|
User ID | The profile ID of the user. |
User name | The full name of the user. |
Reset count | The number of password resets. |
Column | Description |
|---|---|
User ID | The profile ID of the user. |
User name | The full name of the user. |
Login method | The login method used for the password change. |
Reset count | The number of password resets. |
Session activity
Purpose: Login, self-service, usage monitoring and other useful statistics.
The reports list a total count of actions, and a distinct count of the users who acted; for example the password authentication report lists the total count of authentication attempts, and the number of users who have attempted to use a password to authenticate.
Executable: sesslog
Criteria | Description |
|---|---|
Session activity | Select the types of session activity that you want to add to the report output:
|
Choose date range | Define a date range. |
Column | Description |
|---|---|
Statistic | The name of the session activity statistic. |
Description | The description of the statistic. |
Value | The value of the statistic. |
Synchronization
Purpose: Displays results of password synchronization of accounts across target systems.
Executable: synchronization
Criteria | Description |
|---|---|
User ID | Type a profile ID to only list synchronization events that apply to that user. Alternatively, you can search for one or more profile IDs. |
Account | Type an account ID to only list synchronization events that apply to that account. All accounts are selected by default. |
Target system ID | Type a comma-and-space-delimited list of target system IDs for which you want to run the report. All target systems are included by default. Alternatively, you can search for one or more target systems. |
Target system description | Type a description to only list synchronization events from target systems that match that description. All target systems are selected by default. |
Target system type | Select one or more target system types to only include events from your selections. All target system types are selected by default. This field is not displayed if there is no data available. |
Target system group | Select one or more target system groups from the list of configured target system groups. All groups are selected by default. This field is not displayed if there is no data available. |
Synchronization status | Choose from the drop-down list. Select:
|
Choose start date | Define a date range during which the request was accepted. |
Choose end date | Define a date range during which the request was last acted upon. |
If you do not specify any search criteria, the report output includes failed and currently queued sync operations for all target systems and users.
Column | Description |
|---|---|
User ID | The profile ID of the user. |
Account ID | The account identifier on the target system. |
Target system ID | The target system short identifier. |
Target system description | The target system display name. |
Target system group | The target system group. |
Source target | The source target system from which the password change originated. |
Source account | The source account from which the password change originated. |
Queued | The date and time the synchronization was queued. |
Number of tries | The number of synchronization attempts. |
Next try | The date and time of the next synchronization attempt. |
Status | The synchronization status. |
Last result | The result of the last synchronization attempt. |
Scheduled jobs
Purpose: Shows configured scheduled jobs to run in the future.
Executable: schedjobs
Criteria | Description |
|---|---|
Job | Type the job ID of one or more scheduled jobs to only include those jobs in the report. |
Enabled | Select a value to only include schedule jobs with a matching status. |
Schedule type | Select a value to only include scheduled jobs with a matching schedule type. |
Server | The server on which the scheduled job is added. |
Saved configuration ID | Type a saved certification configuration ID to only display scheduled jobs for certification that are based on the saved configuration. Alternatively, you can search for one or more saved certification configuration IDs. |
Filter results by last run date | Define a date range during which the scheduled job was last run. |
Column | Description |
|---|---|
Job name | The name of the scheduled job. |
Command | The command executed by the scheduled job. |
Enabled | Whether the scheduled job is enabled. |
Last run | The date and time the job was last run. |
Last run status | The status of the last run. |
Last finished | The date and time the job last finished. |
Next run | The date and time the job is next scheduled to run. |
Repeat type | The repeat schedule type for the job. |
Saved round ID | The saved certification round identifier, if applicable. |
Saved round description | The description of the saved certification round, if applicable. |
Server | The server on which the scheduled job runs. |
User session activity
Purpose: Reports on operations performed by user per login session.
Executable: useractivity
Criteria | Description |
|---|---|
User ID | Type a profile ID to only list synchronization events that apply to that user. Alternatively, you can search for one or more profile IDs. |
Requester ID | Type a profile ID to only list synchronization events requested by that user. Alternatively, you can search for one or more profile IDs. |
Choose date range | Define a date range. |
Column | Description |
|---|---|
Session identifier | The unique session identifier. |
User ID | The profile ID of the user. |
Profile ID | The profile identifier of the user. |
Operation | The operation performed during the session. |
Status | The status of the operation. |
Result | The result of the operation. |
Time | The date and time of the operation. |
Saved reports statistics
Purpose: File system usage of saved reports.
Lists users who have saved reports, as well as the information about the reports they have saved and the space usage by each report or by each user.
Executable: savedreportquota
Criteria | Description |
|---|---|
User ID | Type the profile ID of the user for whom you want to generate the report. Alternatively, you can search for one or more profile IDs. |
User name | Type the full name of the user for whom you want to generate the report. |
Report expiry time | Define a date range for the report expiry time. |
Exceeded quota users only | Select this checkbox to display only the reports saved by users who have exceeded their space quota limit |
Summarize report | Select this checkbox to summarize the report details. When selected, the report expiry time search criteria will not be available. In this mode, the report includes the User ID, User Name, Number of saved reports and Total space used in megabytes. |
Graph type | Select the graph type:
This option is only shown when Summarize report is checked. |
Number of rows for graph | The maximum rows for graph to display. The selected rows will be displayed with the number of requests in descending order. The maximum numbers of rows that can be displayed is 100. |
The report output depends on whether "Summarize report" is selected.
Column | Description |
|---|---|
User ID | The profile ID of the user. |
User name | The full name of the user. |
Report name | The name of the saved report. |
Report type | The type of the saved report. |
Last run | The date and time the report was last run. |
Space used | The disk space used by the saved report. |
Record count | The number of records in the saved report. |
Expiry time | The date and time the saved report expires. |
Column | Description |
|---|---|
User ID | The profile ID of the user. |
User name | The full name of the user. |
Number of reports | The total number of saved reports for the user. |
Total space used | The total disk space used by the user's saved reports. |
Space remaining | The remaining disk space available for the user. |
Performance metrics
Purpose: To describes the rate of various core Bravura Security Fabric actions.
Executable: performancemetrics
Criteria | Description |
|---|---|
Performance metrics type | Select the report type:
|
General performance metrics | Select a type of the performance requests to list. This option will only show when General performance metrics is selected. |
Workflow performance metrics | Select a type of the request statuses from all pre-defined requests. This option will only show when Workflow performance metrics is selected. |
Authentication performance metrics | Select a type of the request statuses from all pre-defined requests. This option will only show when Authentication performance metrics is selected. |
Display subtotals | Select from different subtotal interval.
|
Choose date range | Define a date range. |
The columns displayed depend on the selected performance metrics type.
Column | Condition | Description |
|---|---|---|
Metric | Always | The performance metric name. |
Pre-defined request ID | Metric type is requests | The pre-defined request identifier. |
Request status | Metric type is requests | The request status. |
Authentication chain ID | Metric type is authentication | The authentication chain identifier. |
Status | Metric type is authentication | The authentication status. |
Value | Always | The metric value. |
Skin / Language pack utilization
Purpose: Provides skin and language pack utilization information within a specified time period in a summarized or detailed report to show which skins and languages have been used to login to the instance.
Executable: languagepackutilization
Criteria | Description |
|---|---|
Skin | Skin utilization information within a specified time period. Select one or more skins to include in the report. The list includes only the installed skins have been used to successfully login to the instance. The default skin in the list is the default skin compiled for the instance. |
Language | Language pack utilization information within a specified time period. Select one or more language packs to include in the report. The list includes only the installed language packs that have been used to successfully login to the instance. The default language pack in the list is United States English (EN-US). |
Choose date range | Define a date range. |
Report type | Choose one of the following to determine which type of report to run.
|
Show detailed report | The default is to have this option unchecked to show the summary report. Only the total number of users and sessions will be shown for the selected skins and languages that were used to login to the instance. When this option checked, a more detailed report will be shown to show which specific languages have been used for each of the selected skins and alternatively which specific skins have been used for each of the selected languages to login to the instance. |
Graph type | Select the graph type:
This option is only shown when Show detailed report is not selected and "All" is not selected as the report type. |
The report output depends on whether "Show detailed report" is selected.
Column | Description |
|---|---|
Skin/Language | The skin or language pack name. |
Details | The detailed breakdown of the skin or language pack usage. |
Number of users | The number of distinct users who used this skin or language. |
Sessions | The total number of sessions using this skin or language. |
Column | Description |
|---|---|
Skin/Language | The skin or language pack name. |
Number of users | The number of distinct users who used this skin or language. |
Sessions | The total number of sessions using this skin or language. |
User and service metrics
Purpose: Lists user and service statistics.
Executable: userservicemetrics
Criteria | Description |
|---|---|
Reporting mode | Select a metrics group that you want to add to the report output. The default option is General user and service metrics :
|
Choose date range | Define a date range. |
The columns displayed depend on the selected reporting mode.
Column | Condition | Description |
|---|---|---|
Metric | Metric type is user count | The metric name. |
Number of accounts | Metric type is user count | The account count. |
Target system ID | Metric type is target system | The target system short ID. |
Target system description | Metric type is target system | The target system display name. |
Target system group | Metric type is target system | The target system group. |
Target system type | Metric type is target system | The target system type. |
Address | Metric type is target system | The target system address. |
Number of accounts | Metric type is target system | The total number of accounts. |
Active accounts | Metric type is target system | The number of active accounts. |
Accounts attached to users | Metric type is target system | The number of accounts attached to user profiles. |
Statistic | Metric type is other | The statistic name. |
Value | Metric type is other | The statistic value. |
SQL utility history
Purpose: Execution history of sqlutil.py.
Executable: sqlutilityhistory
Criteria | Description |
|---|---|
Choose date range: | Define a date range. |
Script execution status: | Select the script execution status that you want to see to the report output. The default option is All :
|
Column | Description |
|---|---|
Script description | The description of the SQL script. |
Start time | The date and time the script execution started. |
End time | The date and time the script execution ended. |
Status | The execution status of the script. |
Execution node | The node on which the script was executed. |
Error | The error message, if the script execution failed. |