Command Report Configuration

This topic describes the metadata that you can select to include in a report about commands that were executed on monitored Unix-based endpoints only (see Report Types).

For detailed instructions on the steps required to create a report, see Creating a Custom Report.

When creating a Commands type report, you can specify types of columns for:

Command fields: as described in the table
Session fields: see Session Report Configuration
Endpoint fields: see Endpoint Report Configuration
User fields: see User Report Configuration

Type	Column	Description
Command	Number of Child Commands	Number of commands run under the parent process
	Command Date	Date (from server) the command was run (selected by default)
	Command Date (local endpoint time)	Date (from local endpoint) the command was run (selected by default)
	Command Name	Name of the command that was run (selected by default)
	Command Param	Parameter (argument) of the Unix command (selected by default)
	Is Root	Logged in user has 'root' permissions
	Sub Session ID	Unique ID for a command in the session
	Top Level Command	Command that was run from the shell level