FireFighter sessions report

[Dorota_P]

Hi,

is there any analytics report that could be used to see all FireFighter sessions that are active in Saviynt? Currently we can see it by going to Request Emergency Access ID-Manage Session-copy list of sessions(not possible to download it). Is there any table that is giving this details?

[nimitdave]

SELECT u.USERNAME AS 'User Name'
,u.email AS 'User Email'
,ac.NAME 'Privileged ID'
,ep.DISPLAYNAME AS 'ENDPOINT_NAME'
,SUBSTRING_INDEX(arsreq.JBPMPROCESSINSTANCEID, '.', - 1) AS 'Request ID'
,ffid_s.REQUEST_START_DATE AS 'Request Start Time'
,ffid_s.REQUEST_END_DATE 'Request End Time' FROM FFID_SESSIONS ffid_s INNER JOIN USERS u ON (ffid_s.REQUESTED_BY = u.USERKEY)
INNER JOIN ACCOUNTS ac ON (ffid_s.ACCOUNT_KEY = ac.ACCOUNTKEY) INNER JOIN ENDPOINTS ep ON (ac.ENDPOINTKEY = ep.ENDPOINTKEY)
INNER JOIN ENDPOINTS_PROPERTIES ep_prop ON (ep_prop.ENDPOINTKEY = ep.ENDPOINTKEY)
INNER JOIN request_access reqaccess ON ffid_s.REQUEST_ACCESS_KEY = reqaccess.REQUEST_ACCESSKEY
INNER JOIN ars_requests arsreq ON reqaccess.REQUESTKEY = arsreq.REQUESTKEY
AND ffid_s.REQUEST_END_DATE >= CURDATE()
AND ffid_s.STATUS = 2
AND u.STATUSKEY = 0;

[Dorota_P]

Hi,

even though we have active FF sessions, report returns 0 records.

[Manu269]

Hello can you please confirm whether you are looking for FFID request details or the usage reports?

[Dorota_P]

Hi,

I need to see all open sessions ( from tile Request Emergency Access IDs -Manage sessions)

[nimitdave]

@Dorota_P Can you check if any of the below queries are giving you results:

SELECT DISTINCT RA.REQUEST_ACCESSKEY AS REQACCKEY, RA.STARTDATE AS STDATE , AREQ.JBPMPROCESSINSTANCEID AS REQID, RA.ENDDATE AS EDATE ,RA.STATUS AS STTS , EP.ENDPOINTNAME AS EPNAME, EP.DISPLAYNAME AS EPDISPNAME , U.USERNAME AS USERNAME , A.NAME AS NAME ,ARSTASKS.STATUS AS TASKSTATUS FROM USERS U , ACCOUNTS A , ARS_REQUESTS AREQ , ENDPOINTS EP,REQUEST_ACCESS RA LEFT JOIN ARSTASKS ON RA.REQUEST_ACCESSKEY=ARSTASKS.REQUESTACCESSKEY
WHERE
RA.REQUESTKEY = AREQ.REQUESTKEY AND
RA.USERKEY = U.USERKEY AND
RA.ACCESSKEY = A.ACCOUNTKEY AND
RA.ENDDATE > '2023-07-03 13:21:10' AND
RA.ACCESSTYPE = 8 AND RA.REQUESTTYPE = 24
AND A.ENDPOINTKEY = EP.ENDPOINTKEY AND EP.STATUS=1 AND
RA.STATUS NOT IN(4,7,6)
ORDER BY REQUEST_ACCESSKEY desc;

select status as 'Session Status', count(FFID_SESSIONKEY) as 'Session Count' from ffid_sessions fs
group by STATUS ;