Self-service search for Content Collaboration
Use the self-service search to get insights into the user events received from the Content Collaboration data source. When users use the Content Collaboration service, events such as login, delete, download, and, upload are generated. Citrix Analytics for Security receives these events and displays them on the self-service search page. You can track the users and their activities.
For more information on the search functionalities, see Self-service search.
Select the Content Collaboration data source
To view the events, in the search box, select Content Collaboration from the list. Select the time period for which you want to view the events and then click Search.
By default, the self-service page displays the events for the last one month. The page also provides you with several facets and a search box to filter and focus on the required events.
Select the facets to filter events
Use the following facets that are associated to the Content Collaboration events.
File Size (Downloaded)- Search events based on the file size downloaded from Content Collaboration.
Event Type- Search events based on the types such as file upload, file download, share link create, session login, folder create, and share link delete.
The following figure shows the user events for the type session login for the last one month.
Specify search query to filter events
Place your cursor in the search box to view the list of dimensions for the Content Collaboration events. Use the dimensions and the operators to specify your query and search for the required events.
For example, you want to search for the events originating from India and the file size is greater than 900,000 bytes. Specify the following query as shown in the figure.
Enter “Co” in the search box to get the related suggestions.
Select Country and enter the value “India” using the equal operator.
Select the AND operator and then select the File-Size dimension. Select the > operator and enter the file size value in bytes.
Select the time period and click Search to view the events on the DATA table.