This article applies to:
Question:
- How do I run a Real Time Probe on a username?
Procedure:
Before running the 'Real Time Probe', confirm the exact user name in question by running an Active Profile Lookup, from the UI go to System> Diagnostic> Active Profile Lookup. Type the IP address of the machine where user is logged in, and click 'Lookup'. Keep note of the exact user name in the 'Profile Name' field.
For example, user name: Trustwave\Internet - ALLOW Anywhere\JaneDoe
In the User Interface, go to Reporting> Real Time Probe, and click 'Go to Real Time Probe Reports GUI', on right bottom side.
Click on the 'Create' tab to enter and specify criteria for the report you wish to generate:
In the 'Search Option' drop down select 'User Name'.
In the empty field type in the exact user name as listed in the 'Active Profile Lookup' results, and apply the settings.
Example: Trustwave\Internet - ALLOW Anywhere\JaneDoe
Notes:
It will be necessary to enter the exact user name in the 'Search Option' field of the real time probe, or else the real time will not display any information, because the user will not be found. For example:
Based on the results of the 'Active Profile Lookup': Trustwave\Internet - ALLOW Anywhere\JaneDoe
If you run the realtime probe on user: Trustwave\JaneDoe (no data will display in the real time probe)
If you run the realtime probe on user: JaneDoe (no data will display in the real time probe)
If you run the realtime probe on user: Trustwave\Internet - ALLOW Anywhere\JaneDoe (real time probe will display any traffic generated by user in question)