Viewing System Reports

Constraints

• Each trend chart displays the statistics for a maximum of 180 consecutive days.
  • By default, the operation data of the current day is displayed by the hour.
  • Operation data over 30 days can only be viewed by the week or month.
  • Operation data within 30 days can be viewed by the day, week, or month.
• The trend chart can only be a bar chart.

Prerequisites

You have the management permissions for the System Report module.

Procedure

1. Log in to your bastion host.
2. Choose Audit > System Report.
3. Click each statistics tab and view the details.

UserControl Stat

This area displays the number of disabling and enabling users. By default, the statistics of the current day is displayed.

In the detailed data area, view the operation time, user login name, source IP address, operation, and operation results.

User&Resource Stat

This area displays statistics of how many users, user groups, hosts, application resources, application servers, accounts, and account groups are created and deleted. By default, the statistics of the current day is displayed.

In the detailed data area, view the operation time, user login name, source IP address, operation, and operation results.

Figure 1 Trend chart of User&Resource Stat

SrcIP Stat

This area displays the number of IP addresses from which users log in to the system. By default, the statistics of the current day is displayed.

You can view top 5, top 10, and top 20 source IP addresses.

In the detailed data area, view the logon time, source IP address, operation, and operation results.

Figure 2 Trend chart of SrcIP Stat

Logon Stat

This area displays the number of logins by login method. By default, the statistics of the current day is displayed.

You can view logins by web browsers and SSH, FTP, and SFTP clients.

In the detailed data area, view the logon time, source IP address, operation, and operation results.

Figure 3 Trend chart of Logon Stat

Exception Stat

This area displays the number of login exceptions. By default, the statistics of the current day is displayed.

You can view top 5, top 10, and top 20 login exceptions.

In the detailed data area, view the logon time, source IP address, operation, and operation results.

Figure 4 Trend chart of Exception Stat

Supervision Stat

This area displays the number of interrupted sessions and monitored sessions. By default, the statistics of the current day is displayed.

In the detailed data area, view the logon time, source IP address, operation, and operation results.

User Status

This area displays the number of zombie users and the number of users by password strength.

• Zombie users are valid users who have not logged in for more than 14 days. Zombie accounts are counted by the number of days during which they have not logged in.

  By default, information about top 5 zombie accounts is displayed. You can view top 5, top 10, and top 20 zombie users.

  In the detailed data area, view the time of the last successful login, source IP address, operation, and operation results.

• Password strength is classified into three levels: high, medium, and low.

  In the detailed data area, you can view the login name of the user who completes the last password change, password strength, and last password change time, which are displayed in ascending order by password strength.

  

  Password strength classification criteria:

  High: The password contains eight or more characters that include uppercase letters, lowercase letters, digits, and special characters.

  Medium: The password contains eight or more characters that include two or three types of the following characters: uppercase letters, lowercase letters, digits, and special characters.

  Low: The password contains fewer than eight characters or contains eight or more characters that include one type of the following characters: uppercase letters, lowercase letters, digits, or special character.