Citrix Analytics for Security

Self-service search for Content Collaboration

Use the self-service search to get insights into the user events received from the Content Collaboration data source. When users use the Content Collaboration service, events such as login, delete, download, and, upload are generated. Citrix Analytics for Security receives these events and displays them on the self-service search page. You can track the users and their activities.

For more information on the search functionalities, see Self-service search.

Select the Content Collaboration data source

To view the events, in the search box, select Content Collaboration from the list. Select the time period for which you want to view the events and then click Search.

Content collaboration selects

By default, the self-service page displays the events for the last one month. The page also provides you with several facets and a search box to filter and focus on the required events.

Content collaboration overview page

Select the facets to filter events

Use the following facets that are associated to the Content Collaboration events.

Content collaboration facets

  • File Size (Downloaded)- Search events based on the file size downloaded from Content Collaboration.

  • Event Type- Search events based on the types such as file upload, file download, share link create, session login, folder create, and share link delete.

The following figure shows the user events for the type session login for the last one month.

Content collaboration facet selection

Specify search query to filter events

Place your cursor in the search box to view the list of dimensions for the Content Collaboration events. Use the dimensions and the operators to specify your query and search for the required events.

Content collaboration dimensions

For example, you want to search for the events originating from India and the file size is greater than 900,000 bytes. Specify the following query as shown in the figure.

  1. Enter “Co” in the search box to get the related suggestions.

    Content collaboration search query 1

  2. Select Country and enter the value “India” using the equal operator.

    Content collaboration search query 2

    Content collaboration search query 3

  3. Select the AND operator and then select the File-Size dimension. Select the > operator and enter the file size value in bytes.

    Content collaboration search query 4

  4. Select the time period and click Search to view the events on the DATA table.

Self-service search for Content Collaboration