Getting Started

Start your Internet browser and specify the URL of DirX Audit Manager for your tenant, for example:
https://localhost:8443/AuditManager/login.xhtml?tenant=685a5aec-4c34-4e64-94fe-377df25f8774.

In Name, enter Tinker Boris.

In Password, enter the password dirx, and then click Login.

Click the Dashboard tab, if it’s not already selected.

Click Manage Components to open the Manage Components dialog.

Select the Public Components tab (if it’s not already selected) and then click Import.

In the display area of the Import dialog, click Add. A file selection dialog is displayed.

Navigate to the folder install_media/Additions/Data/Components.

Type Ctrl+A to select of the files in the folder install_media/Additions/Data/Components in one step and then click Open.

The Import dialog display area now shows the files in the file list. Click Upload to upload them to the application, and then click Import to load them into to the Dashboard. After a few seconds, the new components are displayed under the Public Components tab.

Click Close. Now we’ve completed the task of loading the default components into the Dashboard.

Click Logout to log out of DirX Audit Manager.

In Name, enter Tinker Boris to login again.

In Password, enter the password dirx, and then click Login.

Click the Dashboard tab if it’s not already selected.

Click Layout to open the Layout dialog.

Select the layout that presents components in two rows and three columns, if not already selected.

Click Add new, select the Public Components tab and move to the second table page to add the DirX Identity total audit events on accounts by month and operation component.

Click Add new again to add the Total audit events by month and source component, again from the Public components tab, this time from the third table page.

You can populate the layout with the other components, but you’ll select specific components in subsequent tutorial steps.

Click OK.

Click to open the Edit component dialog.

Click the Data tab if it’s not already selected.

In When, select Any time.

Click Save.

Click to maximize the component. The component now takes over the entire Dashboard view display.

Click on the area next to the 1012 (DirX Identity, Oct/2022) label. This action initiates a drill-down to audit events that originated in DirX Identity in October 2022. A list of audit events appears.

Set the Items per page to 20.

Click to return to the Total audit events by month and source component.

Notice the buttons with component names that appear below the maximized Total audit events by month and source component. These buttons link you to the other components that you have selected for display in the Dashboard view. To switch to one of these components, you can simply click its button.

Click to restore the component’s size from maximized to original.

Look at the component displayed in the Dashboard view. Again, we need to change the time settings:

The chart shows a list of months. There is a stacked bar for each of them. Pieces of the bar represent the following operations: Add Object, Delete Object, Disable, Enable, Update Object and the total number of these operations over account objects. For example, the Add Object operation was run 63 times in October 2022.

Click on the area at the 63 (Add Object, Oct/2022) label to drill down to audit events that record the addition of new accounts. You can use the page navigator to browse the list of events. You can also change a number of audit events per page in the Items per page list.

You can see that some of the accounts were created manually (manual) and some on event or on request.

Click to return to the DirX Identity total audit events on accounts by month and operation component in the Dashboard view.

Click the Oct/2022 month indicator next to the bar with the October stacked bar. You can now see only the October events bars but divided by their day time stamp. This view can be useful when you are interested in getting more detailed information on a particular time range and it allows you to quickly zoom in on it without having to change the entire component time constraint through the settings.

Click to reset the zoom level.

Choose a component you want to change; for example, the DirX Identity total audit events on accounts by month and operation component.

Click to open the Edit component dialog.

Click the Data tab if it’s not already selected.

In When, select Custom time.

Set 1/9/2022 to From and 30/9/2022 to To.

Click Save. The chart is recalculated and the chart’s subtitle indicates the time frame you just applied. You cannot see October 2022 data in this component now because it is out of the changed time scope. To adjust this:

Click to open the Edit component dialog again.

Set the Custom time values to 1/9/2022 in From and 31/10/2022 in To.

Click Save. Now all data is visible again.

Choose a component you want to modify; for example, the DirX Identity total audit events on accounts by month and operation component.

Click to open the Edit component dialog.

Select the Style tab (if it’s not already selected).

Click the drop-down arrow in Color scheme and then select another color option.

Click Save. The chart is recalculated and a different color scheme is applied.

In Source, select DirX Identity.

In Operation, type Add Assignment.

Click Search.

In a result table, select a message with Operation = Add Assignment.

Click the Show Details icon .

In a result table, select a message with Operation = Add Assignment.

Click the Show Related Events icon .

In Source, select DirX Identity.

In Operation, type Add Assignment.

In What Type, type User to Role.

Click Search to check what your selected filtering options will display.

Click Save As….

The Save as … Filter pop-up window opens. In Name, type User to Role Assignment.

In Description, type User to role assignment from DirX Identity audit events.

Click Save.

In Select Filter, select User to Role Assignment.

In Who, type DomainAdmin.

Click Save.

Select Manage Filter .

Click Edit for User to Role Assignment.

In Name, type User to role assignment by DomainAdmin.

In Description, type User to role assignment from DirX Identity audit events caused by Domain Admin.

Click Save.

Select Manage Filter .

Click Delete for User to Role Assignment by DomainAdmin.

The message Delete this filter? is displayed. Click OK. The filter is deleted and removed from the list. It is also removed from the available filters in Select Filter.

Click Close to close the pop-up window.

In Type, select User.

Click the Advanced Search icon .

In Name, type Taspatch and then click Search.

In Type, select Any.

Clear Name in Advanced Search.

In dn, type cn=Taspatch Nik,ou=Global IT,o=My-Company,cn=Users,cn=My-Company.

Click Search.

In the data area, click the Roles tab. DirX Audit Manager displays a table with the names of the roles assigned to Nik Taspatch, the date of their validity and their assignment mode. In the table, you can see that:

In the Role Name column, click the link Internal Employee [rule]. This action directs you to this role’s details page with the Attributes tab table open by default.

Examine the timeline area for the Internal Employee role to view the event markers indicating the users that have been assigned to the role within the two comparison time points.

Click the Users tab in the data area. DirX Audit Manager displays a table that lists the names of these assigned users. Note that the table shows 70 records about user assignment changes, the timeline shows cumulative information due to the zoom level. To view the times in milliseconds of each user-role assignment, you’ll need to adjust the timeline’s scale and then zoom in to the millisecond level of the original time.

Use the zoom-in button in the details page header to expand the timeline’s scale until you can see the event markers that indicate the precise time of each role assignment. Now click the Autozoom button to return to the timeline’s original scale. (Note: on mouse devices that provide wheels, you can use the mouse wheel to zoom in the timeline. You can also use the wheel to scroll down to view the data area in the history detail page, but be careful that your mouse cursor is not in the timeline, or you’ll zoom in the timeline instead of moving to the data area.)

Add three comparison time points to the timeline (by double-clicking in the time line near one of the User event markers or using the Add to Compare function) and then zoom into the timeline until you show the following scenario:

Scroll down in the details page to view the table with the user names. You can see that some users do not have any time records in the first few columns because they were assigned to the role later.

The timeline in the table shows the cumulative information about 55 user assignment changes in the time period of 23/09/2022 - 27/09/2022 because the zoom level is set to months. To view the times in more detail, you’ll need to adjust the timeline’s scale and zoom in to days. Now you can see one event 27/09/2022 and the cumulative information about 54 user assignment changes 23/09/2022. You can proceed this way up to milliseconds.

Check Show changes only. Now you can see the following information:

Click the Attributes tab and then uncheck Show changes only.

Now examine the value of the dxrRoleAdmin attribute. You’ll see that Taspatch Nik is listed as a value. This means that Nik Taspatch was assigned to the role when it was created and that he is the role’s administrator.

Click the Taspatch Nik value for dxrRoleAdmin in the Attributes tab table (the highlighted and underlined text).

Click the down-arrow in Already viewed entries in the details page header and then select the history entry for Nik Taspatch that you previously viewed.

Click the Events tab.

Check the From and To fields and the Events range bar in the timeline. The default scope of the Events range bar is three months previous to the current day. The From and To fields display these dates.

To view the events in September and October, you need to extend the default scope. Click the Events range bar in the timeline and then move the start of the range to September 2022 and end of the range to October 2022.

Examine the Search in field. If it’s not already selected, select the What value from the list. Notice that there are no events for What that contain Taspatch Nik because there were no changes to any of the audited attributes for the user Nik Taspatch processed in the sample data from the DirX Identity tutorial run.

Go back to the Search in field and then select the Who value from the list. Now 41 events are shown because Taspatch Nik was the requester and/or the workflow approver of changes for other users during the DirX Identity tutorial run. You can learn about the details of these changes by reviewing the DirX Identity Tutorial exercises.

Click to create a new report set.

In Name, type Demo report. In Description, type Demo report set with two files. Using these fields makes it easier to identify report sets when they are displayed in the report set definitions table in the Reports view.

Click Save.

Click in Demo report in the list. This action opens the Edit report set dialog with the File tab open by default.

Click to add a new report file. This action starts the report file creation wizard, which displays a list of available report file templates. There are two types: report files that contain only one report (identified by the and the icons in the list) and report files that contain multiple reports (identified by the icon in the list).

You can use Name or Tags to filter the list of report file templates. Type Event in Tags. Now only the reports with the Event tag are displayed.

Click on Changes on User to Privilege Assignments by User to select it in the list. The wizard opens the Report scope dialog, which allows you to define your report file’s parameters.

In the When section, select Any time.

In the Users section, specify the users whose data you want to view. In Identifying Attributes, select Name and then click Search. In the list of users in the Found table, check the boxes next to Bader Hans and Baretti Franca, and then click Add. These users are now shown in the Selected table.

In Attribute Value, type Teacher Mark and then click Search. Now check the box next to Teacher Mark (ou: Professional Services, o: My-Company, alt: 83730) and then click Add. Teacher Mark is now shown in the Selected table.

You can click Preview to check the results of your filtering criteria. A dialog window opens, offering to open the preview PDF directly with the browser or to save it for later checking. Note that the Row limit field restricts the amount of results displayed in the Preview report. In this example, clicking Preview helps you to determine that there are no access requests events for Baretti Franca in the sample data set.

Click Finish to complete the report file definition.

Now type Changes on User to Privilege Assignments by User - Bader Hans, Baretti Franca and Teacher Mark in Name. This file name will be displayed in the email as the name of the attachment and will also be displayed in the report set File tab.

Next, type User to Privilege Assignments by 3 users, pdf file format in Description.

Click OK. The report file is inserted into the report set and is displayed in the file list.

Click Save to save your changes to the Demo report report set.

Click in Demo report in the list. This action opens the Edit report set dialog with the File tab open by default.

Click to add a new report file.

Use Name to filter the list of report file templates: type Logins in Name. Now only the reports that contain Logins in their names are displayed.

Click on the Total Sum of Logins report in the list to select it.

In When, select Custom time From 01/09/2022 To 31/10/2022.

In the Source section, define the source for the data you want to see. In Identifying Attributes, select Name and then click Search. In the Found table, check the box next to DirX Identity and then click Add. DirX Identity is added to the Selected table.

Click Next report. This action allows you to insert another report into the file.

Clear Tags. In Name, replace Logins with Assignments. You now see only those reports whose names contain assignments.

Click State of Assignments by User to select it in the list.

In the When section, select End of Previous Month.

In the Users section, define the source for the data you want to see. In Identifying Attributes, select cn and then click Search. The Found table displays a long list of users.

In Attribute Value, type Abele and then select Abele Marc from the list. Now click Search. You can see Abele Marc in the Found table. Check the box next to the entry and then click Add. This user is added to the Selected table.

In Attribute Value, type Teacher Mark and then follow the same procedure as with Abele Marc to add Teacher Mark to the Selected table. Now search for Berner Hans and Taspatch Nik and then add them to the Selected table.

Click Finish to create the report file with two reports.

In Name, type File combines two reports in one attachment.

In Description, type Logins for DirX Identity, Assignments by user for Abele Marc, Teacher Mark, Berner Hans and Taspatch Nik.

Click OK. The report file is inserted into the report set and is displayed in the file list. You can see two different reports under the file you just added, which means that these two reports will be collated in one email attachment.

Click Save.

Click in the Demo report set row to open it for editing.

Click the Schedule tab and then select As soon as possible.

Check No end time. (When this box is not checked, you can define an end date after which the report is no longer sent.)

Click the Send to tab and then enter your email address in To.

In Subject, type Demo report set.

Type the message text in Body. For example, Report set generated from DirX Audit. The attachment contains two files. In the file Changes on User to Privilege Assignments by User - Bader Hans, Baretti Franca and Teacher Mark there is a report Changes on User to Privilege Assignments by User. In the file named File combines two reports in one attachment there are Logins and Assignments by user.

You can also leave the Body empty. The report status and description are then automatically added to the email message.

Click Save.

An inactive report is identified by the icon in the first column of report set list. Click the inactive icon for the Demo report set to activate it.

The icon changes to to indicate that synchronization is operating. After the DirX Audit Server processes the changes, the icon changes to to mark the report set as active.

If you set up the SMTP email server correctly during DirX Audit configuration, you will receive the email with the report attachment. For the As soon as possible scheduling option, the report is sent only once after each editing and saving.

Click in the Demo report row to open the report set for editing. You’ll see two report files. One of them is the multi-report file named File combines two reports in one attachment with two reports listed underneath it. Click next to Total Sum of Logins to open it for editing. In the report scope dialog, change When to Previous Month.
Click OK.

Perform the same steps for the other report file Changes on User to Privilege Assignments by User - Bader Hans, Baretti Franca and Teacher Mark to change the When scope to Previous Month for the report it contains.

Click the Schedule tab and then select Recurring.

In Start date, select today’s date. Set Time to run for five minutes from now.

Uncheck No end time and then set End date for one month from today. The email and report will not be generated after this date.

Set Frequency to Monthly.

Select today’s date in Day of month so that you’ll see the generated email immediately.

Click Save.