Data Explorer Tool

In this topic:

Viewing Data Forms

What You can Do

 

Click to enlarge

 

 

Data Explorer allows you to explore recorded events across the network. Each Data Explorer Folder in the left pane (initially, Favorites and Activity Types) displays a set of "data forms" in the right pane. See Data Explorer Folders for more about the folders and their data forms.  

Use Data Explorer to start an investigation from the activity type; for example, start with Keystrokes Typed by all users. Make your query using Criteria—for example, search Keystrokes Typed for "XYZ Company." When you get the results, you can load the events and "drill in" to view the single event where a user typed that phrase.

Viewing Data Forms

Each activity type opens an Events window where you can view individual records from the recorded data.

To view a data form:

  1. Click the Data Explorer button at the bottom of the Dashboard navigation pane.

  2. Select a Data Explorer Folder at the top of the navigation pane to display its data forms in the right pane.

  3. Double-click a data form in the right pane. A Criteria box opens, prompting you to filter or search for data before opening a form. If you wish:

  • Select Bypass Criteria Dialog on the General Criteria panel to skip the Criteria box and go straight to the Events window the next time you open this form.

  • Select Save Criteria to on either panel to save your Criteria changes for this form.  

  1. Click OK on the Criteria box to accept the Criteria and display the data in an Events Window.  
    If you see <No Data Available>, there was no data that met your Criteria. Once an Events window is open, you can click the Criteria button in the Navigate pane at any time to set adjust the Criteria.

  2. Start in the upper left Navigate pane. Select a user to display the user's event dates in the Summary pane.



    Or     you can:

  1. Click Load Events at the top of the Navigate pane to load all of the selected user's events (for ALL dates) into the lower Events pane.

  2. Click Grouping to change the Navigate and Summary displays by changing the data hierarchy.

  3. Click the + next to a user to open the Navigate tree and select the next level of data (e.g., one day) or a lower level of data and view the Summary for that group.  

  1. In the Summary pane, select a date (or other data grouping). Click Load Events to load all event records for the currently selected branch of data (date, user, program, etc.) into the lower Events pane.

Use the Auto-Load feature to automatically load the currently selected Navigate or Summary data group into the Events grid. Open the Data Explorer View menu and select Autoload Events.

  1. In the lower Events pane, select a row (a record). Fields for each event show Start Time, Computer, User, Program, and other information. When you select an event record, you can click the buttons at the top of the Events pane or right-click for a menu of actions. When you select a Chat, Email, or Keystroke event, the Content for the activity (message or keys typed) appears in the very bottom pane.

You can create an instant report by opening the File menu on the Events window, selecting Report, and Create Report (to save the report to a Reports folder) or Preview Report (to view the report in a Preview window).

What You can Do

Data Explorer allows you to display, analyze, and act on recorded data.

Related Topics:

Using Data Explorer Folders

Creating New Data Forms

Using the Events Window

Understanding Recorded Events