Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Configure Queries

Configure queries to retrieve the data Content Security Reporter uses to generate reports.

View Top Users by Browse Time example:

When configuring a query, consider the following user scenario for viewing the top users in your organization by overall browse time.

Assume the users in your organization have access to the Internet, and you would like to block specific users from the sites they visit most often.

Use the View Top Users by Browse Time query to compare which users in your organization use the most browse time. After you have identified which users in your organization use the most browse time, Content Security Reporter allows you to block these users from accessing their most visited websites.

In this scenario, you can:

  • Discover which users in your organization use the most browse time.
  • Compare the users in your organization that use the most browse time.
  • Assess the websites top users visit most often.
  • Block the websites that the top users visit most often.
  1. Select the query result type.
    1. Select Queries & Reports > Actions and click New, or select an existing query from the list and click Edit.
      The Query Builder appears with the Result Types view active.
    2. From the Database Type drop-down list, select Content Security Reporter.
    3. From the Feature Group list, select an option.
      The associated data types appear on the Result Types menu.
    4. Select a result type, then click Next.
  2. Select the query layout.
    1. From the Display Results As menu, select a layout to best display your data.
    2. Configure the remaining layout options, then click Next.

TIP: When entering the maximum value for the display, it is recommended to use a lower value. For example, when configuring the Grouped Bar Chart options, type 10 instead of 200 in the Maximum groups field.

  1. Select the query columns.
    1. From the Available Columns menu, select the columns to apply to your query.
    2. In the Selected Columns configuration area, select, drag, and position each column data type.
    3. Click Next.
  2. From the Available Properties menu, select which properties to use for filtering your query and the appropriate values for each.
  3. Click Run to check that you get the type of results you expect.
    If the query returns unexpected results, click Edit Query and edit the query options.
  4. Save the query.
    1. Click Save.
    2. On the Save Query page, type a name for the query, add any notes, and select the group.
    3. Click Save.

Track group membership

Configure Content Security Reporter to pull a list of groups from the directory during log file processing and directory updates.

  1. Configure the directory group attribute.
    1. Select Menu > Configuration > Report Server Settings, then click Directories.
    2. Select the directory, then click Actions > Copy.
    3. Click the Advanced tab, enter the Group Key, then click OK.
    4. On the Directories page, select the directory, then click Actions > Update Now.
  2. Add the directory to the log source.
    1. Click Log Sources, then select the log source.
    2. Click Actions > Edit.
    3. On the Edit Log Source page, click the Directory tab.
    4. From the Available directories list, select the directory, then click Add.
    5. Click OK.
  3. Configure the query.
    1. Select the Result Type, then click Next.
    2. From the Chart type menu, select List > Table, then click Next.
    3. From the Available Columns list, select Group List, then click Next.

      TIP: Only use the Group List when you change the query settings. Avoid the Group List option when you create a new query.

    4. From the Available Properties list, select Group Filter, then click Run.

      TIP: Only use the Group Filter to track group membership.
  • Was this article helpful?