PingID Administration Guide

Running the PingID SDK Admin Activity Report

Run the PingID SDK Admin Activity Report from the admin portal.

About this task

The PingID SDK admin activity report outputs detailed information regarding admin-related activity during the past week.

Steps

  1. From the admin portal, go to Dashboard → Reporting → Reports.

    Result:

    A list of pre-defined reports display.

  2. Next to PingID SDK Admin Activity of the last 7 Days, click Run.

    Result:

    The report output is presented. For a detailed description of the report output fields, see PingID Admin Activity Report fields for PingID SDK.

    • You can customize the report output by adding optional field columns, removing default fields, and changing default runtime parameters, according to the steps in the generic PingOne Run a custom report procedure.

    • You can stream PingID event information to Splunk or other third-party products. You can view and analyze this information when you subscribe to PingID audit events through the PingOne subscription facility. For more information, see Subscriptions in the PingOne Admin Guide.

  3. To download the report in .csv format, click Export.

    Result:

    The report is saved in your browser’s default downloads folder. The export process can take several minutes to complete, depending on the size of the report.

PingID Admin Activity Report fields for PingID SDK

The PingID Admin Activity Report produces output with the following default and optional fields.

Customize the report output by adding optional field columns, removing default fields, and changing default runtime parameters. For more information, see https://docs.pingidentity.com/access/sources/dita/topic?resourceid=p14e_run_custom_reportRun a custom report].

Field name Description Default/Optional

Timestamp

The date and time when the admin action event occurred, according to the current time zone.

Default

Admin

The email address, username, or LDAP name assigned to the administrator who performed the action.

Default

Admin Type

The type of administrator. This will be "user" unless the action was performed by a Ping Identity employee.

Default

Action

The type of resource and the action of the event. Possible values:

  • account updated

  • report updated

  • user updated

Default

Resource Name

The name of the resource on which the action was performed.

Default

Resource Type

The type of resource on which the action was performed. Possible values:

  • account

  • report

  • user

Default

Message

Detailed information regarding the action event, including the resource type, resource name, and nature of the admin action.

Default

Admin Id

The unique identifier assigned by PingOne to the administrator.

Optional

Browser Agent

The browser name and version used for PingOne SSO.

Optional

IP Address

The IP address of the host used to initiate the event.

Optional

Resource Id

The unique identifier assigned by PingOne to the resource.

Optional

Status

The status of the action. Possible values:

  • SUCCESS

  • FAILURE

Optional