Saviynt Audit Trail report generation

h_sapkota
Regular Contributor
Regular Contributor

Hi Team,

We need to fetch reports data for various Object Type, Action performed and accessed by, that is shown in the Saviynt Audit trail section under

Admin > Admin Functions > Audit Trail.

Below Screenshot shows how it looks in UI.

h_sapkota_0-1688024364254.png

I tried to see the tables under Data analyzer but couldn't find any tables that gives relevant data to these audit trail. Can you help us how we can generate report and schedule such report which will consists of Audit trail information for all the events in Saviynt?

 

Thanks and Regards,

Hitesh Sapkota

2 REPLIES 2

smitg
Regular Contributor III
Regular Contributor III

Hi @h_sapkota 

Please check if below query helps you
select ua.TYPEOFACCESS as 'Object Type',ua.ActionType as 'Action Taken',u.username as 'Accessed By', ua.IPADDRESS as 'IP Address',ua.ACCESSTIME as 'Event Time',ua.DETAIL as 'Message' from users u , userlogin_access ua, userlogins l where l.loginkey = ua.LOGINKEY and l.USERKEY = u.userkey and ua.AccessTime >= (NOW() - INTERVAL 90 Minute) and ua.Detail is not NULL

https://docs.saviyntcloud.com/bundle/Splunk-Guide/page/Content/Managing-Application-Audit-Logs.htm
https://docs.saviyntcloud.com/bundle/KBAs/page/Content/Queries-for-generating-User-Login-reports.htm

Thanks,
Smitha

h_sapkota
Regular Contributor
Regular Contributor

Hi Smitg,

This actually helps.

Thanks.