2.7 ZENworks Audit

To generate ZENworks Audit predefined reports:

  1. Log in to ZENworks Reporting.

  2. Navigate to View > Repository > Folders > Organization > Reports > ZENworks Audit > Predefined Reports.

  3. Click the required predefined report.

  • All Audit Events in a Month: This report displays information about the audit events for a particular month across the Management Zone. You can filter based on event classification, primary target object name, event created on, or event name. This displays only the change audit events.

  • All Critical Events by Administrator: This report displays information about the critical events generated by the ZENworks administrator for specific period. You can filter based on event classification, event created on, or event initiator name. This displays only the change audit events.

  • Change Audit Events per ZCC Session ID: This report displays information about the set of activities that are performed in a session. You can filter based on event classification, event created on, session ID, or IP address. This displays only the change audit events.

  • Critical Events Logged by Managed Device in Last Month: This report displays information about the set of critical events generated by the managed device. You can filter based on event initiator type, event created on, event classification, or event name. This displays only the device audit events.

  • Events Expiring in One Week: This report displays information about the events that are expiring from the database within a week. You can filter based on event classification or event expiration date.

  • Failed Login Attempts for Managed Devices: This report displays information about the failed login events for a specific managed device. You can filter based on event created on, event name, or device name.

  • File Transfers during Remote Management: This report displays information about the total files transferred in a particular remote management session for a specific period. You can filter based on event created on or event name.

  • Files Transferred from Managed Device: This report displays information about the files transferred to or from a managed device in the Management Zone. For example, files transferred from USB to a managed device or from a managed device to USB. You can filter based on event created on or event name.

  • Logged Intruder Detection Events: This event is recorded when a remote operator specifies the wrong credentials several times during a remote session and if those invalid attempts cross the limit specified in the Policy settings. This report displays information about logged intruder events. You can filter based on event created on or event name.

  • Policies Changed over a Period: This report displays information about policies that are changed over a specific period.

  • Remote Management Events in a Period: This report displays information about events in a particular remote management session for a specific period. You can filter based on event name, event created on, or event classification.

  • ZCC Login Failures: This report displays information about the ZENworks Control Center login failures. The failure could be because of a wrong password, lack of permission, or cancellation of certification. You can filter based on event message, event name, device name, or event created on.