The Audit Dashboard gives an overview of the auditing system.
It shows a heat map of sessions and events and shows graphs of user information by Session or by Event. In the heat map, darker colors represent more sessions or events, and lighter colors mean fewer sessions or events.
A session is an SMB connection from a client computer, which persists until it is disconnected and generally contains many events. Events are low-level commands sent from a client within a session.
Session information shows the number of connections by:
- User
- Gateway
- Client
Event information shows the number of actions by:
- User
- Gateway
- Client