The Audit Dashboard gives an overview of the auditing system.
Critical information will be shown at the top of the Dashboard page.
It shows a heat map of sessions and events and shows graphs of user information by Session or by Event. In the heat map, darker colors represent more sessions or events, and lighter colors mean fewer sessions or events.
A session is an SMB connection from a client computer, which persists until it is disconnected and generally contains many events. Events are low-level commands sent from a client within a session.
Session information shows the number of connections by:
- User
- Gateway
- Client
Event information shows the number of actions by:
- User
- Gateway
- Client