Click Reports > Built-In Reports on the home page of the console.
Click Credential Checkouts.
The Details pane displays the following information about each instance of the report.
|
Column |
Description |
|---|---|
|
Checkout Time |
Displays the date and time when the password was checked-out. |
|
Checkin Time |
Displays the date and time when the password was checked-in. |
|
User |
Displays the name of the user who checked-out the password |
|
Run As |
Displays the name of the user who checked-out the password |
|
Run Host |
Displays the name of the host from which the password was issued |
|
Request ID |
Displays the request ID of the password checkout |
|
Checked-in By |
Displays the user who check-in the password |
|
Target |
Displays the target for which password was checked-out |
|
Audits |
Displays the unique ID details of the audit record |
|
UEBA Risk |
You can configure the following risk levels for ArcSight Intelligence: UEBA_USER_NOT_FOUND UEBA_NOT_CONFIGURED UEBA_CONFIGURATION_DISABLED This rule is configured with the default behavior to consider any user with ArcSight Intelligence score less than 50 as a low-risk user. You can modify this rule to change how the score from ArcSight Intelligence is interpreted. You can modify the value for the score (the default value for the score condition is < 50). |