Self-service search for Content Collaboration

Use the self-service search to get insights into the user events received from the Content Collaboration data source. When users use the Content Collaboration service, events such as login, delete, download, and, upload are generated. Citrix Analytics for Security receives these events and displays them on the self-service search page. You can track the users and their activities.

For more information on the search functionalities, see Self-service search.

Select the Content Collaboration data source

To view the events, in the search box, select Content Collaboration from the list. Select the time period for which you want to view the events and then click Search.

Content collaboration selects

By default, the self-service page displays the events for the last one month. The page also provides you with several facets and a search box to filter and focus on the required events.

Content collaboration overview page

Select the facets to filter events

Use the following facets that are associated to the Content Collaboration events.

Content collaboration facets

  • Is Employee- Search events based on the employment status of the users in your enterprise.

  • Operation Name- Search events based on the user operations such as browse, copy, create.

  • Byte Total- Search events based on the size of files downloaded.

For example, you want to view the events of users who have downloaded files in the last one month and the total bytes downloaded in between 0–50 MB. Select Download in the Operation Name facet and 0–50 MB in the Bytes Total facet. Select the time period. The search page displays the events corresponding to the download operation.

Content collaboration facet selection

Specify search query to filter events

Place your cursor in the search box to view the list of dimensions for the Content Collaboration events. Use the dimensions to specify your query and search for the required events.

Content collaboration dimensions

You can also use the operators in your search query to expand your search criteria and get the required result.

For example, you want to search for the events originating from India and the file size is greater than 900,000 bytes. Specify the following query as shown in the figure.

  1. Enter “Co” in the search box to get the related suggestions.

    Content collaboration search query 1

  2. Select Country and enter the value “India” using the equal operator.

    Content collaboration search query 2

    Content collaboration search query 3

  3. Select the AND operator and then select the File-Size dimension. Select the > operator and enter the file size value in bytes.

    Content collaboration search query 4

  4. Select the time period and click Search to view the events on the DATA table.

Self-service search for Content Collaboration