The Users dossier displays information about users, associated processes, and additional properties.
To navigate to the Users Workload dossier in the Lacework Console, click Workload > Users. See Workload Dossier Navigation and Filters for information about filtering dossier data.
To populate the data available in this dossier, you must install the Lacework agent on at least one host.
By default, this dossier displays all hosts and their associated information for the current day, beginning at midnight.
These charts aggregate data about machines and network traffic. Available charts display unique machines and applications, total connections, etc.
The timeline displays events that match the date/time filter and any specified optional parameter filters set at the top of the page.
These Polygraphs display processes tied to users. Available Polygraphs include Privilege Change, Insider Behavior, and User Login.
This table displays information for users found in /etc/passwd. Information includes UID, groups, home directory, etc.
User Login Activity
This table displays all logins within the specified time frame.
User Authentication Summary
This table displays all attempted logins and whether they were successful or not.
This table displays host properties.
User Root Action
This table displays root-related activities.