DLP User Actions Audit Cube

Contains historical information about administrative events within the Data Loss Prevention system, including details about the type of the entity that was changed as well as the nature of the change. Information specific to this cube includes the total number of administrative events, event creation date, username, source IP address, and more.

Dimensions

  • Oracle Database – Host Name: Denotes the Oracle database name and instance name from which the data is obtained
  • User Action – Category: Action taken when the even occurred
  • User Action – Detail: Free text details for the event
  • User Action – Entity: Object or component name on which the event occurred
  • User Action – IP Address: IP Address of the PC that triggered the event
  • User Action – Role: Role assigned to the user who triggered the event
  • User Action – User Name: DLP user who triggered the event
  • User Action – Date: Date the event occurred
  • User Action – Date Range: Date range the event occurred
  • User Action – Day of Week: Date of the week the event occurred
  • User Action – Month: Month the event occurred
  • User Action – Quarter: Quarter the event occurred
  • User Action – Week Number: Week number the event occurred
  • User Action – Year: Year the event occurred
  • User Action – Hour: Hour the event occurred
  • User Action – Second: Second the event occurred
  • User Action – Minute: Minute the event occurred
  • User Action – Time: Time the event occurred

Measures

  • Administrative Count: Total number of administrative events.
  • Events Count: Total number of events.