Trend reports
Trend reports give you data on trends in privileged access actions, onboarding and offboarding, and request volume.
Demo
Click below to view a demonstration of a request volume trend report.
Managed account access check-out trend
Purpose: Trend analysis of account access check-outs.
Executable: pwdcicotrend
Criteria | Description |
|---|---|
Trend by | Select the type of trend report to run:
|
Managed system ID | Type a comma-and-space-delimited list of IDs for managed systems you want to include in the report. This field is only visible when Trend by is set to Account or Managed system . Alternatively, you can search for one or more managed systems. |
Managed account | Search for one or more managed accounts you want to report on. Alternatively, you can type a managed account ID or a pattern of managed account IDs using wildcard characters, '*' representing any string of characters and '?' representing any single character. This field is only visible when Trend by is set to Account . |
Recipient ID | Type a comma-and-space-delimited list of recipients you want to include in the report. This field is only visible when Trend by is set to Recipient . Alternatively, you can search for one or more recipient profile IDs. |
Operation to perform for check-out and check-in | Select one or more operations:
|
Specify time | Specify a date range for user check-outs. |
Choose relative date | Specify a relative date for user check-outs. The content from this field will vary depending on which Specify time you choose. |
Reporting time interval | Specify a time interval for the collected data. Records can be organized by day, week, month, quarter, or year. |
Summarize report | Select this if you prefer to have a numerical summary of the trend type. |
Graph type | Specify the type of graph for a visual representation of the data. The available graph types are Vertical bar chart and Line chart. This field is only visible when Summarize report is selected. |
The report output depends on the selected Trend by option and whether Summarize report is enabled.
Detailed by account
When Trend by is set to Account and Summarize report is not selected, the report lists check-out details per managed account.
Column | Description |
|---|---|
Managed account | The managed account that was requested or checked out. |
Managed system ID | The unique identifier of the managed system. |
Managed system name | The display name of the managed system. |
Operation | The type of operation (Password or SSH key). |
Total requests | The total number of access requests for the account. |
Total check-outs | The total number of completed check-outs for the account. |
Detailed by system
When Trend by is set to Managed system and Summarize report is not selected, the report lists check-out details per managed system.
Column | Description |
|---|---|
Managed system ID | The unique identifier of the managed system. |
Managed system name | The display name of the managed system. |
Operation | The type of operation (Password or SSH key). |
Total requests | The total number of access requests for the system. |
Total check-outs | The total number of completed check-outs for the system. |
Detailed by recipient
When Trend by is set to Recipient and Summarize report is not selected, the report lists check-out details per recipient.
Column | Description |
|---|---|
Recipient ID | The profile ID of the recipient. |
Recipient name | The display name of the recipient. |
Operation | The type of operation (Password or SSH key). |
Total requests | The total number of access requests by the recipient. |
Total check-outs | The total number of completed check-outs by the recipient. |
Summary
When Summarize report is selected, the report displays a numerical summary grouped by the selected reporting time interval.
Column | Description |
|---|---|
Time period | The time period label (dynamic based on the selected reporting time interval, such as day, week, month, quarter, or year). |
Total requests | The total number of access requests during the time period. |
Total check-outs | The total number of completed check-outs during the time period. |
Drill-down
Clicking a data point in the summary or chart view opens a drill-down view showing individual request records. Columns vary by drill-down context.
Column | Description |
|---|---|
Request date | The date the request was submitted. |
Request ID | The unique identifier of the access request. |
Requester | The user who submitted the access request. |
Check-out time | The time the managed account access was checked out. |
Recipient | The user who received the checked-out access. |
Operation | The type of operation (Password or SSH key). |
Status | The current status of the request or check-out. |
Managed account | The managed account that was requested or checked out. |
Managed system | The managed system associated with the account. |
Total requests | The total number of requests in this drill-down record. |
Total check-outs | The total number of check-outs in this drill-down record. |
Group set access check-out trend
Purpose: Trend analysis of group set access check-outs.
Executable: managedgroupsetcotrend
Criteria | Description |
|---|---|
Trend by | Select the type of trend report to run:
|
Group set ID | Type a group set ID you want to include in the report. This field is only visible when Trend by is set to Group set. Alternatively, you can search for one or more group sets. |
Recipient ID | Type a comma-and-space-delimited list of recipients you want to include in the report. This field is only visible when Trend by is set to Recipient . Alternatively, you can search for one or more recipient profile IDs. |
Managed system policy ID | Type a comma-and-space-delimited list of managed system policy IDs you want to include in the report. This field is only visible when Trend by is set to Managed system policy . Alternatively, you can search for one or more policies. |
Specify time | Specify a date range for user check-outs. |
Reporting time interval | Specify a time interval for the collected data. Records can be organized by day, week, month, quarter, or year. |
Summarize report | Select this if you prefer to have a numerical summary of the trend type. |
Graph type | Specify the type of graph for a visual representation of the data. The available graph types are Vertical bar chart and Line chart. This field is only visible when Summarize report is selected. |
The report output depends on the selected Trend by option and whether Summarize report is enabled.
Detailed by group set
When Trend by is set to Group set and Summarize report is not selected, the report lists check-out details per group set.
Column | Description |
|---|---|
Group set ID | The unique identifier of the group set. |
Group set description | A description of the group set. |
Existing group set | Indicates whether the group set currently exists in the system. |
Managed system policy ID | The unique identifier of the managed system policy. |
Managed system policy description | A description of the managed system policy. |
Total requests | The total number of access requests for the group set. |
Total check-outs | The total number of completed check-outs for the group set. |
Detailed by recipient
When Trend by is set to Recipient and Summarize report is not selected, the report lists check-out details per recipient.
Column | Description |
|---|---|
Recipient ID | The profile ID of the recipient. |
Recipient name | The display name of the recipient. |
Total requests | The total number of access requests by the recipient. |
Total check-outs | The total number of completed check-outs by the recipient. |
Detailed by policy
When Trend by is set to Managed system policy and Summarize report is not selected, the report lists check-out details per policy.
Column | Description |
|---|---|
Managed system policy ID | The unique identifier of the managed system policy. |
Managed system policy description | A description of the managed system policy. |
Total requests | The total number of access requests for the policy. |
Total check-outs | The total number of completed check-outs for the policy. |
Summary
When Summarize report is selected, the report displays a numerical summary grouped by the selected reporting time interval.
Column | Description |
|---|---|
Time period | The time period label (dynamic based on the selected reporting time interval, such as day, week, month, quarter, or year). |
Total requests | The total number of access requests during the time period. |
Total check-outs | The total number of completed check-outs during the time period. |
Drill-down
Clicking a data point in the summary or chart view opens a drill-down view showing individual request records. Columns vary by drill-down context.
Column | Description |
|---|---|
Request date | The date the request was submitted. |
Request ID | The unique identifier of the access request. |
Requester | The user who submitted the access request. |
Check-out time | The time the group set access was checked out. |
Recipient | The user who received the checked-out access. |
Status | The current status of the request or check-out. |
Group set | The group set that was requested or checked out. |
Existing group set | Indicates whether the group set currently exists in the system. |
Managed system policy | The managed system policy associated with the group set. |
Total requests | The total number of requests in this drill-down record. |
Total check-outs | The total number of check-outs in this drill-down record. |
Account set access check-out trend
Purpose: Trend analysis of account set access check-outs.
Executable: maqcicotrend
Criteria | Description |
|---|---|
Trend by | Select the type of trend report to run: Account set : Lists all account sets that were requested and/or checked out. Recipient : Lists recipients who requested and/or checked out account sets. Managed system policy: Lists managed system policies from which account sets were requested and/or checked out. |
Account set ID | Type a comma-and-space-delimited list of IDs for account sets you want to include in the report. This field is only visible when Trend by is set to Account set. Alternatively, you can search for one or more account sets. |
Recipient ID | Type a comma-and-space-delimited list of recipients you want to include in the report. This field is only visible when Trend by is set to Recipient . Alternatively, you can search for one or more recipient profile IDs. |
Managed system policy ID | Type a comma-and-space-delimited list of managed system policy IDs you want to include in the report. This field is only visible when Trend by is set to Managed system policy . Alternatively, you can search for one or more policies. |
Specify time | Specify a date range for user check-outs. |
Reporting time interval | Specify a time interval for the collected data. Records can be organized by day, week, month, quarter, or year. |
Summarize report | Select this if you prefer to have a numerical summary of the trend type. |
Graph type | Specify the type of graph for a visual representation of the data. The available graph types are Vertical bar chart and Line chart. This field is only visible when Summarize report is selected. |
The report output depends on the selected Trend by option and whether Summarize report is enabled.
Detailed by query
When Trend by is set to Account set and Summarize report is not selected, the report lists check-out details per account set query.
Column | Description |
|---|---|
Query ID | The unique identifier of the account set query. |
Query description | A description of the account set query. |
Managed system policy ID | The unique identifier of the managed system policy. |
Managed system policy description | A description of the managed system policy. |
Total requests | The total number of access requests for the account set. |
Total check-outs | The total number of completed check-outs for the account set. |
Detailed by recipient
When Trend by is set to Recipient and Summarize report is not selected, the report lists check-out details per recipient.
Column | Description |
|---|---|
Recipient ID | The profile ID of the recipient. |
Recipient name | The display name of the recipient. |
Managed system policy ID | The unique identifier of the managed system policy. |
Managed system policy description | A description of the managed system policy. |
Total requests | The total number of access requests by the recipient. |
Total check-outs | The total number of completed check-outs by the recipient. |
Detailed by policy
When Trend by is set to Managed system policy and Summarize report is not selected, the report lists check-out details per policy.
Column | Description |
|---|---|
Managed system policy ID | The unique identifier of the managed system policy. |
Managed system policy description | A description of the managed system policy. |
Total requests | The total number of access requests for the policy. |
Total check-outs | The total number of completed check-outs for the policy. |
Summary
When Summarize report is selected, the report displays a numerical summary grouped by the selected reporting time interval.
Column | Description |
|---|---|
Time period | The time period label (dynamic based on the selected reporting time interval, such as day, week, month, quarter, or year). |
Total requests | The total number of access requests during the time period. |
Total check-outs | The total number of completed check-outs during the time period. |
Drill-down
Clicking a data point in the summary or chart view opens a drill-down view showing individual request records. Columns vary by drill-down context.
Column | Description |
|---|---|
Request date / Check-out time | The date the request was submitted or the time the check-out occurred, depending on the drill-down context. |
Request ID | The unique identifier of the access request. |
Requester | The user who submitted the access request. |
Recipient | The user who received the checked-out access. |
Status | The current status of the request or check-out. |
Account set | The account set that was requested or checked out. |
Managed system policy | The managed system policy associated with the account set. |
Total requests | The total number of requests in this drill-down record. |
Total check-outs | The total number of check-outs in this drill-down record. |
Onboarding and offboarding trend
Purpose: Trend analysis of onboarding and offboarding managed systems and managed accounts.
Executable: pamonboardoffboard
Criteria | Description |
|---|---|
Trend by | Select the type of trend report to run. The following are only available if Report type is "Detailed" or "Summary":
The following are only available if Report type is "Summary by System or Account":
|
Managed system ID | Type a comma-and-space-delimited list of IDs for managed systems you want to include in the report. This field is only visible when Trend by is set to "Systems", "Systems onboarded", "Systems archived" or "Systems deleted". Alternatively, you can search for one or more managed systems. |
Account | Type the ID of a privileged account to include in the report. This field is only visible when Trend by is set to "Accounts", "Accounts onboarded", "Accounts archived" or "Accounts deleted". |
Managed system policy ID | Type a comma-and-space-delimited list of IDs for managed system policies you want to include in the report. This field is only visible when Trend by is set to "Systems onboarded" or "Accounts onboarded". Alternatively, you can search for one or more policies. |
Date range | Choose a date range |
Reporting time interval | Specify a time interval for the collected data. Records can be organized by day, week, month, quarter, or year. This field is only visible when Report type is set to "Summary" or "Summary by System or Account". |
Report type | Select the way that data is displayed:
|
Graph type | Specify the type of graph for a visual representation of the data. The available graph types are Vertical bar chart and Line chart. This field is only visible when Report type is set to "Summary" or "Summary by System or Account". |
The report output depends on the selected Report type and Trend by options.
Detailed
When Report type is set to Detailed, the report lists individual onboarding or offboarding records. Columns vary depending on whether the Trend by selection is system-based or account-based.
Column | Condition | Description |
|---|---|---|
Date | Always displayed | The date the onboarding or offboarding event occurred. |
Account | Displayed when Trend by is account-based | The managed account that was onboarded, archived, or deleted. |
System | Displayed when Trend by is system-based | The managed system ID that was onboarded, archived, or deleted. |
System description | Displayed when Trend by is system-based | A description of the managed system. |
Managed system policy ID | Displayed when Trend by is "Systems onboarded" or "Accounts onboarded" | The unique identifier of the managed system policy. |
Managed system policy description | Displayed when Trend by is "Systems onboarded" or "Accounts onboarded" | A description of the managed system policy. |
Managed system policy | Displayed when Trend by is account-based with onboarding | The managed system policy associated with the account. |
Summary
When Report type is set to Summary, the report displays a numerical summary grouped by the selected reporting time interval. Dynamic count columns appear based on the selected Trend by operations.
Column | Description |
|---|---|
Time period | The time period label (dynamic based on the selected reporting time interval, such as day, week, month, quarter, or year). |
Additional dynamic count columns appear based on the selected Trend by operations (for example, counts of systems onboarded, accounts archived, and so on).
Consolidated summary
When Report type is set to Summary by System or Account, the report displays a consolidated numerical summary. Columns are conditional on whether the Trend by selection is system-based or account-based.
Column | Condition | Description |
|---|---|---|
Systems onboarded | Displayed when Trend by is "Systems" | The total number of managed systems onboarded during the reporting period. |
Systems archived | Displayed when Trend by is "Systems" | The total number of managed systems archived during the reporting period. |
Systems deleted | Displayed when Trend by is "Systems" | The total number of managed systems deleted during the reporting period. |
Accounts onboarded | Displayed when Trend by is "Accounts" | The total number of managed accounts onboarded during the reporting period. |
Accounts archived | Displayed when Trend by is "Accounts" | The total number of managed accounts archived during the reporting period. |
Accounts deleted | Displayed when Trend by is "Accounts" | The total number of managed accounts deleted during the reporting period. |
Access disclosure plugins execution trend
Purpose: Trend analysis of access disclosure plugin executions.
Executable: pluginexecutiontrend
Criteria | Description |
|---|---|
Trend by | Select the type of trend report to run. The following are available:
|
Plugin file name | Select access disclosure plugins:
|
User ID | Type a comma-and-space-delimited list of user IDs. Alternatively, search to find the matching user. |
Managed system ID | Type a comma-and-space-delimited list of managed system IDs. Alternatively, search to find the matching managed systems. |
Account | Enter the ID of the account. |
Specify time | Specify a daterange for user check-outs. The other fields will vary depending on your choice. |
Time range | Specify a time range :
|
Reporting time interval | Set the interval by which requests are grouped. For example, if Reporting time interval is "By week", and Submit date includes requests submitted during the last 31 days, then the report output displays separate counts for each week from the past month. By default, the interval is "By week". |
Summarize report | Select this if you prefer to have a numerical summary of the trend type. |
Graph type | Specify the type of graph for a visual representation of the data. |
The report output depends on the selected Trend by option and whether Summarize report is enabled.
Detailed by account
When Trend by is set to Plugin/User/System/Account and Summarize report is not selected, the report lists individual plugin executions per account.
Column | Description |
|---|---|
Plugin file name | The file name of the access disclosure plugin that was executed. |
Plugin description | A description of the access disclosure plugin. |
Plugin notes | Any notes associated with the plugin. |
Account name | The name of the account used during the plugin execution. |
User name | The name of the user who executed the plugin. |
Managed system ID | The unique identifier of the managed system. |
Managed system name | The display name of the managed system. |
Account ID | The unique identifier of the account. |
Detailed by plugin
When Trend by is set to Plugin and Summarize report is not selected, the report lists execution totals per plugin.
Column | Description |
|---|---|
Plugin file name | The file name of the access disclosure plugin. |
Plugin description | A description of the access disclosure plugin. |
Plugin notes | Any notes associated with the plugin. |
Total executions | The total number of times the plugin was executed during the reporting period. |
Summary
When Summarize report is selected, the report displays a numerical summary grouped by the selected reporting time interval.
Column | Description |
|---|---|
Time period | The time period label (dynamic based on the selected reporting time interval, such as day, week, month, quarter, or year). |
Total executions | The total number of plugin executions during the time period. |
Summary by plugin
When Summarize report is selected and Trend by is set to Plugin, the report displays a summary with dynamic columns for each plugin.
Column | Description |
|---|---|
Dynamic plugin columns | One column per selected plugin, showing the execution count for that plugin during each time period. |
Total executions | The total number of plugin executions across all plugins during the time period. |
Drill-down
Clicking a data point in the summary or chart view opens a drill-down view showing individual execution records.
Column | Description |
|---|---|
Plugin file name | The file name of the access disclosure plugin that was executed. |
Plugin description | A description of the access disclosure plugin. |
Plugin notes | Any notes associated with the plugin. |
User | The user who executed the plugin. |
Managed system | The managed system on which the plugin was executed. |
Account ID | The unique identifier of the account used. |
Total executions | The total number of executions for this record. |
Additional columns for cloned plugin description and execution time may appear depending on the drill-down context.
Request volume trend
Purpose: Trend analysis of request volume per time interval.
Executable: requestvolume
Criteria | Description |
|---|---|
Requester ID | Type a comma-and-space-delimited list of profile IDs that match the requesters for whom you want to generate the report. Alternatively, you can search for one or more requester profile IDs. |
Recipient ID | Type a comma-and-space-delimited list of profile IDs that match the recipients for whom you want to generate the report. Alternatively, you can search for one or more recipient profile IDs. |
Authorizer ID | Type a comma-and-space-delimited list of profile IDs that match the authorizers for whom you want to generate the report. Alternatively, you can search for one or more profile IDs. |
Implementer ID | Type a comma-and-space-delimited list of profile IDs that match the implementers for whom you want to generate the report. Alternatively, you can search for one or more implementer IDs. |
Submit date | Choose a date range during which requests were submitted. |
Request status | Select one or more request statuses to include in the report output; for example, use the Request unposted status to include requests that were started but were not submitted. |
Operation | Select one or more operations to include in the report. |
Reporting time interval | Set the interval by which requests are grouped. For example, if Reporting time interval is By week , and Submit date includes requests submitted during the last 31 days, then the report output displays separate counts for each week from the past month. By default, the interval is By week . |
Reporting mode | Select the way that data is displayed:
|
Graph type | Specify the type of graph for a visual representation of the data. The available graph types are Vertical bar chart and Line chart. |
Note
Time values are indicated in HH:MM format.
The report output depends on the selected Reporting mode.
Drill-down
Clicking a data point in the chart or summary view opens a drill-down view showing individual request records.
Column | Description |
|---|---|
Request ID | The unique identifier of the request. |
Request date | The date the request was submitted. |
Request status | The current status of the request. |
Requester | The user who submitted the request. |
Recipient | The user who is the recipient of the request. |
Volume trend
When Reporting mode is set to Total by time interval, the report displays request volume metrics grouped by the selected reporting time interval.
Column | Description |
|---|---|
Time period | The time period label (dynamic based on the selected reporting time interval, such as day, week, month, quarter, or year). |
Submitted | The total number of requests submitted during the time period. |
Submitted open | The number of submitted requests that are still open at the end of the time period. |
Fastest | The shortest time to complete a request during the time period. |
Slowest | The longest time to complete a request during the time period. |
Average | The average time to complete a request during the time period. |
Median | The median time to complete a request during the time period. |
Snapshot open | The total number of open requests at the end of the time period (cumulative snapshot). |
By status
When Reporting mode is set to Total by time interval and status, the report displays request counts broken down by status for each time period. Columns are dynamic based on the selected request statuses.
Column | Description |
|---|---|
Dynamic status columns | One column per selected request status, showing the count of requests in that status for each time period. |
By operation
When Reporting mode is set to Total by time interval and operation, the report displays request counts broken down by operation type for each time period. Columns are dynamic based on the selected operations.
Column | Description |
|---|---|
Dynamic operation columns | One column per selected operation type, showing the count of requests for that operation during each time period. |