Environment
NetIQ Access Manager 4.3
Analytics Server
Analytics Server
Situation
NAM Administrator wants to look at auditing events on new Analytics server dashboard. After enabling individual events on the Access Gateway and Identity Serve, the dashboard reported lots of useful information. However, the 'Application Accessed' dashboard event remained blank, even though many applications behind the Access Gateway were accessed.
Looking at the Sentinel events produced by the Access Gateway, we confirmed the events were generated successfully, yet the dashboard failed to report it. Since all other events on the dashboard were reported, it seemed unique to the 'Application Accessed' event.
Looking at the Sentinel events produced by the Access Gateway, we confirmed the events were generated successfully, yet the dashboard failed to report it. Since all other events on the dashboard were reported, it seemed unique to the 'Application Accessed' event.
Resolution
Make sure the "Session
Created/Destroyed" event is also enabled on the Access Gateway auditing configuration. The dashboard will only display the 'Applications Accessed' when this is enabled in parallel with the "Application Accessed" audit event.