Purpose
The Windows System Audit Activeboard performs detailed system-level analysis on the Windows host by analyzing system events, account login statuses, and policy changes.
Pre-requisites
To run this Activeboard, you must have the following data sources available on your domain:
box.all.winlearn more
Open Windows System Audit Activeboard
Once you have installed the application, you can access the Activeboard in the following ways:
Go to Exchange in the navigation and look for the Activeboard you want to open. Click Open.
Go to Activeboards in the navigation pane and use the filter to open the Activeboard you downloaded.
Know more about Activeboards
Refer to Manage and filter Activeboards article to know how to work with Activeboards.
Exploring the Activeboard
When opening the Windows System Audit Activeboard, the following info display:
Load data takes too long
Sometimes some widgets take time to upload the data, it is possible to speed up the process by creating aggregation tasks. Refer to Aggregation tasks article to learn how to do it.
Widget | Details |
|---|---|
Filter by Host | |
| Total Audit Success |
| Total Audit Failures |
| Events Over Time |
| Account logons |
| Accounts with 10 or more failed loggons per hour |
| More Recent Audit Events |
| Processes created |
| Audit Policy changes |