PingID Administration Guide

Running the PingID Admin Activity Report

The PingID Admin Activity Report contains detailed information regarding admin-related activity.

About this task

To run the PingID Admin Activity Report:

Steps

  1. In the PingOne admin console, go to Dashboard → Reporting → Reports to display the list of pre-defined reports.

  2. On the PingID Admin Activity of the last 7 Days entry, click Run.

    Result:

    The report output is presented. See PingID Admin Activity Report fields for detailed descriptions of the report fields.

    • Customize the report output by adding optional field columns, removing default fields, and changing default runtime parameters. For more information, see Running a custom report.

    • You can stream PingID event information to Splunk or other third-party products. You can also view and analyze event information when you subscribe to PingID audit events through the PingOne subscription facility. For more information, see Subscriptions.

  3. Optional: Click Export to download the report output in .csv format.

    Result:

    The report is saved in your browser’s default downloads folder. The export process may take several minutes to complete, depending on the size of the report.

PingID Admin Activity Report fields

The PingID Admin Activity Report produces output with the following default and optional fields.

Customize the report output by adding optional field columns, removing default fields, and changing default runtime parameters. For more information, see https://docs.pingidentity.com/bundle/pingone/page/cwo1564020469709.htmlRun a custom report].

Field name Description Default/Optional

Timestamp

The date and time when the admin action event occurred, according to the current time zone.

Default

Admin

The email address, username, or LDAP name assigned to the administrator who performed the action.

Default

Admin Type

The type of administrator. This will be "user" unless the action was performed by a Ping Identity employee.

Default

Action

The type of resource and the action of the event. Possible values:

  • account updated

  • report updated

  • user updated

Default

Resource Name

The name of the resource on which the action was performed.

Default

Resource Type

The type of resource on which the action was performed. Possible values:

  • account

  • account - authentication methods

  • report

  • user

Default

Message

Detailed information regarding the action event, including the resource type, resource name, and nature of the admin action.

Default

Admin Id

The unique identifier assigned by PingOne to the administrator.

Optional

Browser Agent

The browser name and version used for PingOne SSO.

Optional

IP Address

The IP address of the host used to initiate the event.

Optional

Resource Id

The unique identifier assigned by PingOne to the resource.

Optional

Status

The status of the action. Possible values:

  • SUCCESS

  • FAILURE

Optional