Configure the Events by user report

If you use role-based administration, you must have the Report configuration right to perform this task. For more information, see Managing roles and sub-estates.

The Events by user report shows application control, firewall, data control, and device control events, along with web events, grouped by user.

  1. Click the Reports icon on the toolbar.
  2. In the Report Manager dialog box, select Events by user and click Properties.
  3. In the Events by User Properties dialog box, on the Configuration tab, set up the options you want.
    1. In the Report details panel, edit the name and description of the report, if you wish.
    2. In the Reporting period panel, in the Period text box, click the drop-down arrow and select a time period.

      You can either select a fixed period, for example, Last month, or select Custom and specify your own time period in the Start and End boxes.

    3. Under Event types to include, select the features for which you want to show events.
  4. On the Display options tab, under Display, choose which users you want the report to show.

    By default, the report shows all users and the number of events for each. You can configure it to show only:

    • the top n users that have recorded the most events (where n is a number you specify), or
    • users with m events or more (where m is a number you specify).
  5. Under Sort by, select whether you want to sort users by the number of events or name.

    By default, the report lists users in order of decreasing number of events per user. Select User if you want them sorted by name in alphabetical order.

  6. On the Schedule tab, select Schedule this report if you want to run the report at regular intervals, with the results being sent to your chosen recipients as email attachments. Enter the start date and time and the frequency with which the report will be generated, specify the output file format and language, and enter the email addresses of the recipients of the report.