Access Protocol Filter Properties

Set filter name and identifier on the General tab, if required, add description.

Set data filtering conditions for access protocol table on the Conditions tab. The Filtering Conditions list displays a list of all conditions connected using logic operators. The Description of Condition list contains parameters of the selected condition.

To create a condition:

Click the Add button or select the Add context menu item in the filtering conditions list.
Set condition parameters in the Edit Filtering Condition dialog box.
Click the OK button.

After executing the operations, the condition is added to the list of filtering conditions. The Description of Condition list will display the specified condition parameters.

To edit a condition:

Select the condition.
Click the Edit button or select the Edit context menu item in the list of filtering conditions.
Change condition parameters in the Edit Filtering Condition dialog box.
Click the OK button.

After executing the operations the condition will be edited. Condition parameters are changed in the Description of Condition list.

The condition can also be edited by clicking hyperlinks in the Description of Condition list. Opening the hyperlink opens dialog boxes with additional parameter settings.

To select a logical operator on joining conditions:

Select the radio button in the context menu of the selected condition in the filters list:

Select a logical operator in the drop-down list next to the filtering condition.

After selecting a logical operator the selected condition will be joined with the previous one via a logical operator.

To delete the selected filtering condition, click the Delete button or select the Delete context menu item in the list of filtering conditions.

Show records on specific/before specific date. The time period is set, for which access protocol records are shown:

Show or hide failed logins. It determines whether failed logins are shown in the access protocol.

Show or hide successful logins. It determines whether successful logins are shown in the access protocol.

Show or hide unsuccessful operations. It determines whether denied operations are shown in the access protocol.

Show or hide successful operations. It determines whether allowed operations are shown in the access protocol.

Show only selected platform users. Setting up this condition opens the dialog box containing a list of users of Foresight Analytics Platform, for example:

Select the users, whose actions need to be displayed in the access protocol. Clicking the Select All button selects checkboxes for all available users. Clicking the Deselect All button deselects all the checkboxes.

Show only selected OS users. Setting up the condition opens a dialog box to select OS users, records on which are available in the access protocol:

Show only selected workstations. Setting up the condition opens a dialog box to select workstations, records on which are available in the access protocol:

Select the workstations, which actions need to be displayed in the access protocol. Clicking the Select All button selects checkboxes for all available workstations. Clicking the Deselect All button deselects all the checkboxes.

Show only selected operations. Setting up the condition opens a dialog box to select operations:

Select the operations, information on which is to be displayed in the access protocol. Clicking the Select All button selects checkboxes for all available operations. Clicking the Deselect All button deselects all the checkboxes.

NOTE. On selecting operations, note that operations can be bound to a specific object class.

Show only selected classes. Setting up the condition opens a dialog box to select classes:

Select the object classes, information on which is to be displayed in the access protocol. Clicking the Select All button selects checkboxes for all available classes. Clicking the Deselect All button deselects all the checkboxes.

NOTE. When selecting the classes take into account the configured operation filtering parameters because operations can be bound to a specific object class.

Show only selected objects. When the condition is enabled, the protocol contains records only for the objects that are found in accordance with the specified name and/or identifier. On setting up the condition a dialog box opens where the user needs to specify filter for objects' search:

Name or Identifier Includes. Specify name or identifier of the object, for which the protocol records are to be displayed. The combo-box contains history of previously entered values (stores search history).
Find by Names. When the checkbox is selected, the objects are searched in accordance with their names.
Find by Identifiers. When the checkbox is selected, the objects are searched in accordance with their identifiers.

NOTE. When the Find by Names and Find by Identifiers checkboxes are used together, the objects that contain the selected word in both name and identifier are searched.

Match Case. Selecting the checkbox enables the user to execute a case-sensitive search (for example, if you have specified "Report" for the search, no objects containing "report" or "REPORT" in the name or identifier are returned).
Match Whole Word. Selecting the checkbox enables the user to search only for objects, which name or identifier contains whole words matching the searched word.