Create a High Risk Users Report
Create a High Risk Users Report
You are viewing classic reports documentation. When Reports (New Experience) is no longer in BETA, the classic reports documentation will be replaced with “Reports” documentation, aka Reports (New Experience).
Users are rated based on their application usage and data exposure risk.
To create a high risk users table:
- Create a new report and add a chart.
- For Event Type, select Page.
- For Time, select Last 30 Days.
- Enter the query
user-risk eq high
- Click Next.
- For Summarize By, select User.
- For Format, select Table.
- For Widget Size (height,width), select 2,2.
- For Show Top, select 25.
- For Summarize Next, select None.
- Click Next.
- For Numeric Values, select Bytes Downloaded, Bytes Uploaded, and Sessions.
- For Sort By, select Sessions.
- Click Next.
- For Name, enter a unique name like Top 25 High Risk Users Table.
- Click Save Chart.
- A table displays on the Reports page.
This report shows:
- A list of the top 25 high risk users (names intentionally omitted above).
- The total number of bytes uploaded, bytes downloaded, and sessions data per user.
Tip
To change the graph format or data shown, select the Edit icon and modify the options you previously selected.
You can export this table in CSV format, and download or email this report in PDF format. This report can be modified to do a second-level summary on the apps per user. This would show the top apps by each risk user.