Running the PingID Admin Activity Report
The PingID Admin Activity Report contains detailed information regarding admin-related activity.
About this task
To run the PingID Admin Activity Report:
Steps
-
In the PingOne admin console, go to Dashboard → Reporting → Reports to display the list of pre-defined reports.
-
On the PingID Admin Activity of the last 7 Days entry, click Run.
Result:
The report output is presented. See PingID Admin Activity Report fields for detailed descriptions of the report fields.
-
Customize the report output by adding optional field columns, removing default fields, and changing default runtime parameters. For more information, see Running a custom report.
-
You can stream PingID event information to Splunk or other third-party products. You can also view and analyze event information when you subscribe to PingID audit events through the PingOne subscription facility. For more information, see Subscriptions.
-
-
Optional: Click Export to download the report output in
.csv
format.Result:
The report is saved in your browser’s default downloads folder. The export process may take several minutes to complete, depending on the size of the report.
PingID Admin Activity Report fields
The PingID Admin Activity Report produces output with the following default and optional fields.
Customize the report output by adding optional field columns, removing default fields, and changing default runtime parameters. For more information, see https://docs.pingidentity.com/bundle/pingone/page/cwo1564020469709.htmlRun a custom report].
Field name | Description | Default/Optional |
---|---|---|
Timestamp |
The date and time when the admin action event occurred, according to the current time zone. |
Default |
Admin |
The email address, username, or LDAP name assigned to the administrator who performed the action. |
Default |
Admin Type |
The type of administrator. This will be "user" unless the action was performed by a Ping Identity employee. |
Default |
Action |
The type of resource and the action of the event. Possible values:
|
Default |
Resource Name |
The name of the resource on which the action was performed. |
Default |
Resource Type |
The type of resource on which the action was performed. Possible values:
|
Default |
Message |
Detailed information regarding the action event, including the resource type, resource name, and nature of the admin action. |
Default |
Admin Id |
The unique identifier assigned by PingOne to the administrator. |
Optional |
Browser Agent |
The browser name and version used for PingOne SSO. |
Optional |
IP Address |
The IP address of the host used to initiate the event. |
Optional |
Resource Id |
The unique identifier assigned by PingOne to the resource. |
Optional |
Status |
The status of the action. Possible values:
|
Optional |