Alert Details: Users Tab

Viewing Additional Details for Investigation 6-67 You can open the Device Details page by clicking the Device ID link.

6.15.4 Alert Details: Locations Tab

This tab lists the locations country, state and city that have been in a session in which the alert was triggered. Figure 6–38 Alert Details: Locations The page contains the following filter parameters. The search results display the location, IP address, authentication status, last trigger date, user name, and alert count for each location. If the alert is generated from the same city but different IP then that city appears as many times as the unique IP. Alert Count displays the number of times, the alert was triggered from the location during a timeframe. You can open the Location Details page by clicking the Location link. Table 6–61 Location Tab Filters Description Location Country ID, State ID, City ID IP Address Address mapped to a location usually, although some addresses are unknown or private Authentication Status Status of the session each logintransaction attempt creates a new session. For information, refer to Authentication Status . Last Used On Get all the locations from which the user logged in during the given time duration 6-68 Oracle Fusion Middleware Administrators Guide for Oracle Adaptive Access Manager Clicking the User Name or IP address link opens the corresponding details page.

6.15.5 Alert Details: Sessions Tab

This tab lists sessions in which the alert was triggered. Figure 6–39 Alert Details: Sessions The tab contains the following filter parameters. By default the results are sorted by Session ID, which is unique. Table 6–62 Sessions tab Filter Description Session ID The unique identifier for a session. Authentication Status Status of the session each logintransaction attempt creates a new session. For information, refer to Authentication Status . Client Type Virtual Authentication Devices. Device or application used for authentication or fingerprinting. For example: TextPad, KeyPad, Question Pad, login page, flash tracker. auth.client.type.enum is the enum used Device ID Uniquely identifies each device and is autogenerated by the application. User Name Login name given by user to login. IP Address Address mapped to a location usually, although some addresses are unknown or private Location Where the login occurred Trigger Date Generation date