topic Top 5 user behavior report in General Topics

Top 5 user behavior report

jdprovine — Wed, 14 Sep 2016 19:44:27 GMT

In the predefined report it has a section called Top 5 user behavior report. What exactly is this telling me about the user/pcs/devices that are listed?

Re: Top 5 user behavior report

reaper — Thu, 15 Sep 2016 11:50:35 GMT

this is the top5 internal users/sources for the amount of sessions created (so the top 5 session sources, internally)

Re: Top 5 user behavior report

jdprovine — Thu, 15 Sep 2016 13:03:11 GMT

I have just typical users listed as like 2nd over all and I am usually concerned when I see someone in that list, usually their pc is doing something it shouldn't be. So is that a good way of tracking bad behavior?

Re: Top 5 user behavior report

reaper — Thu, 15 Sep 2016 13:16:41 GMT

it could be a good starting point to highlight 'unusually' high activity from a user or system

if you then check other reports or simply filter the traffic logs for activity by that source, suspicious behaviour (excessive browsing, torrenting, ...) could emerge 😉