Self-service search for Content Collaboration 编辑

Use the self-service search to get insights into the user events received from the Content Collaboration data source. When users use the Content Collaboration service, events such as login, delete, download, and, upload are generated. Citrix Analytics for Security receives these events and displays them on the self-service search page. You can track the users and their activities.

For more information on the search functionalities, see Self-service search.

Select the Content Collaboration data source

To view the Content Collaboration events, select Content Collaboration from the list. By default, the self-service page displays the events for the last one day. You can also select the time period for which you want to view the events.

Select the facets to filter events

Use the following facets that are associated to the Content Collaboration events.

• Download File Size- Indicates the size of the file downloaded from Content Collaboration.

• Event Type- Indicates the types of user activities such as file upload, file download, share link create, session login, folder create, and share link delete.

  

Specify search query to filter events

Place your cursor in the search box to view the list of dimensions for the Content Collaboration events. Use the dimensions and the operators to specify your query and search for the required events.

For example, you want to search for the events originating from India and the file size is greater than 900,000 bytes. Specify the following query as shown in the figure.

1. Enter “Co” in the search box to get the related suggestions.

   

2. Select Country and enter the value “India” using the equal operator.

   

   

3. Select the AND operator and then select the File-Size dimension. Select the > operator and enter the file size value in bytes.

   

4. Select the time period and click Search to view the events on the DATA table.

Audit logs

The audit logs provide insights into the permissions and actions applied on the user accounts by the Content Collaboration administrators. Using these data, you can verify if the Content Collaboration administrators have taken valid actions on the user accounts.

You can view the following audit logs in the self-service search.

Note

To receive these logs on Citrix Analytics, you must integrate the Citrix Content Collaboration service with Citrix Workspace.

Malware logs

The malware event File.VirusInfected is triggered when a file uploaded by a Content Collaboration user is infected with a malware. The following logs are specific to the malware event.

Supported dimensions for your search query

The following table describes the dimensions that you can view in the self-service search events. You can use these dimensions for defining your search query.