20.4 Enabling Reporting

To enable the reporting feature, perform the following steps:

  1. Enable Events: The following table provides the list of events that are required for specific reports. You can enable the required events.

    For more information about how to enable Access Gateway events, see Section 19.3, Enabling Access Gateway Audit Events.

    For more information about how to enable Identity Server events, see Section 19.2, Enabling Identity Server Audit Events.

    The following table lists Access Manager reports and associated events:

    Name of Report

    Description

    Event

    Component

    NetIQ Access Manager Application Access Summary

    Summary of applications accessed at a specified time

    Application Access

    Access Gateway

    NetIQ Access Manager User Application Access Summary

    Users who accessed a particular application at a specified time

    Application Access

    Access Gateway

    NetIQ Access Manager Application Specific User Access

    Number of applications accessed by a specific user at a specified time

    Application Access

    Access Gateway

    NetIQ Access Manager Federation Summary

    Users who accessed a federated service at a specified time

    Federation Request Sent and Federation Request Handled

    Identity Server

    NetIQ Access Manager User Login Contract Summary

    Number of user login based on authentication contracts at a specified time

    Login Consumed

    Identity Server

    NetIQ Access Manager User Login Failure Report

    Number of failed login attempts and their reasons

    Login Consumed Failure

    Identity Server

    NetIQ Access Manager Application Specific Risk based Authentication Report

    Number of risk-based authentication attempts and the action taken for each attempt at a specified time for a specific application.

    Risk-based Authentication Succeeded

    Risk-based Authentication Failed

    Risk-based Authentication Action Invoked

    Identity Server

  2. Configure the IP Address of Audit Server: Perform the following steps:

    1. Log in to Administration Console.

    2. Click Auditing.

    3. Specify the following details:

      Server Listening Address: (ForSentinel Server or Sentinel Log Manager in Access Manager) Specify the Sentinel server IP address.

      (For Analytics Server) Specify the primary address of Analytics Server. If you are using a cluster setup, then specify the virtual IP address that you defined during installation procedure.

      Port: Specify the default port as 1468.

    4. Click Apply > OK.