Click Reports on the home page of the console.
Click Credential Checkouts in the navigation pane.
Select the report in the navigation pane.
The navigation pane displays the following information about each instance of the report.
|
Column |
Description |
|---|---|
|
Password Checkout Time |
Displays the date and time when the password was checked-out. |
|
User |
Displays the name of the user who checked-out the password. |
|
Run As |
Displays the name of the user who checked-out the password. |
|
Run Host |
Displays the name of the host from which the password was issued |
|
Password Checked-in By |
Displays the user who checked-in the password |
|
Password Check-in Time |
Displays the check-in time of the password |
|
Target |
Displays the target for which password was checked-out |
|
Request ID |
Displays the request ID of the password checkout |
|
UEBA Risk |
You can configure the following risk levels for ArcSight Intelligence: UEBA_USER_NOT_FOUND UEBA_NOT_CONFIGURED UEBA_CONFIGURATION_DISABLED This rule is configured with the default behavior to consider any user with ArcSight Intelligence score less than 50 as a low-risk user. You can modify this rule to change how the score from ArcSight Intelligence is interpreted. You can modify the value for the score (the default value for the score condition is < 50). |