Application Report Configuration
This topic describes the metadata that you can select to be included in an Applications type report ( see Report Types). Application type reports can be generated on monitored Windows or Mac endpoints.
An Applications type report would be typically used to report on activities that occurred on applications or websites with which the user interacted.
In addition, you can generate Application type reports that can expose potential data leaks, when for example, corporate or sensitive files are copied or printed, a user connects a USB storage device, or large files are copied or printed. You can configure these reports in the Advanced Filters section of the Report Configuration wizard (Step 3), by selecting the Window Title option, and then specifying the required prefix to enable the report mechanism to easily identify the activity. As follows:
-
To generate a report on activities that detect the insertion of a USB storage device, specify the USBCONNECT prefix in the Window Title. For example: "Window Title" "starts with" "USBCONNECT".
-
To generate a report on activities that detect the copying of files/folders, specify the FILECOPY or LARGEFILECOPY prefix in the Window Title. For example: "Window Title" "starts with" "FILECOPY".
- When copying multiple files/folders and the name of all the files/folders exceeds the total limit of 256 characters, a "+" sign (e.g., "+FILECOPY" or "+LARGEFILECOPY") is added.
-
To generate a report on activities that detect the printing of files or documents, specify the PRINTJOB or LARGEPRINTJOB (if the number of pages exceeds 10) prefix in the Window Title.
For detailed instructions on the steps required to create a report, see Creating a Custom Report.
When creating an Applications type report, you can specify types of columns for:
-
Application General and Application In-App Element fields: as described in the table
-
Session fields: see Session Report Configuration
-
Endpoint fields: see Endpoint Report Configuration
-
User fields: see User Report Configuration
| Type | Column | Description |
|---|---|---|
|
Application - General |
Application Name |
Name of the application with which the user interacted (as shown in the Windows Task Manager). |
|
Website Name |
Name of the website with which the user interacted (extracted from the URL). Examples:
|
|
|
Window Title |
Title of the window that was opened by the user. Note: As described above, in "Advanced Filters" (Step 3 of the Report Configuration wizard), you can add prefixes to the Window Title to report on USB file insertion, file/folder copying or printing, or large file/folder copying or printing. |
|
|
Process Name |
Name of the process that the user was running while interacting with the application (the main executable of the application without the .exe extension). For example: iexplore |
|
|
URL |
URL from which the website name is extracted. See above. |
|
|
Date of First Slide (in Group) |
Date (from server) of the first session slide that was captured in a group. When creating a report, you can specify how report results will be grouped. If for example, Window Titles are grouped according to Application Name, selecting this field will display an entry for each unique combination of Application Name + Window Title.
|
|
|
Date of First Slide (in Group) (local endpoint time) |
Date (from local endpoint) of the first session slide that was captured in a group. When creating a report, you can specify how report results will be grouped. If for example, Window Titles are grouped according to Application Name, selecting this field will display an entry for each unique combination of Application Name + Window Title.
|
|
|
Date of Slide |
Date (from server) of the session slide that was captured. Selecting this field will display an entry for each slide in the captured session. |
|
|
Date of Slide (local endpoint time) |
Date (from local endpoint) of the session slide that was captured. Selecting this field will display an entry for each slide in the captured session. |
|
|
Play Video (button) |
Select to display the Video replay icon for playing back the session with the application. |
|
|
Application - In App Element |
Application/Website |
Name of the application/website in which the In-App element was marked (in the Marking Tool). The following operators allow you to select predefined applications/websites to be included in or excluded from your report:
|
|
Element Name |
Name of the In-App element which was marked. The following operators allow you to select predefined element names to be included in or excluded from your report:
|
|
|
Element Value |
Value of the element. |
|
|
Interaction Type |
Whether the element was Clicked, Displayed, or Clicked and Displayed. The following operators allow you to select predefined interaction types to be included in or excluded from your report:
|
See also