Self-service search for Authentication 编辑

Use the self-service search to get insights into the user authentication details of the Citrix Cloud users in your enterprise. Citrix Analytics for Security receives the user authentication events from the Identity and Access Management service of Citrix Cloud. Authentication events such as user login, user logoff, and client update are displayed on the self-service search page.

For more information on the search functionalities, see Self-service search.

Select the Authentication data source

To view the authentication events, select Authentication from the list. By default, the self-service page displays the events for the last one day. You can also select the time period for which you want to view the events.

Select the facets to filter events

Use the following filter for the authentication events:

• Event Type- Search events based on the user event types such as user login, user logoff, and client update.

  

Specify search query to filter events

Place your cursor in the search box to view the list of dimensions for the authentication events. Use the dimensions and the operators to specify your query and search for the required events.

For example, you want to view the authentication events for a client “nina-test” with the email status verified.

1. Enter “client” in the search box to get the related dimensions.

   

2. Select Client-Name and then specify the value “nina-test” using the equal operator.

   

   

3. Select the AND operator and then select the Email-Verified dimension. Assign the value “true” to Email-Verified using the equal operator. The “true” value indicates that the user’s email is verified.

   

4. Select the time period and click Search to view the events on the DATA table.