You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
49 lines
1.5 KiB
49 lines
1.5 KiB
<form version="1.1">
|
|
<label>External Logins Map - Microsoft Exchange</label>
|
|
<fieldset submitButton="false">
|
|
<input type="text" token="username">
|
|
<label>Username</label>
|
|
<default>*</default>
|
|
</input>
|
|
<input type="dropdown" token="selectedApp">
|
|
<label>Application</label>
|
|
<choice value="*">any</choice>
|
|
<choice value="owa">Outlook Web Access</choice>
|
|
<choice value="ews">Exchange Web Services</choice>
|
|
<choice value="microsoft-server-activesync">ActiveSync</choice>
|
|
<default>*</default>
|
|
</input>
|
|
<input type="time">
|
|
<label/>
|
|
<default>
|
|
<earliest>-60m@m</earliest>
|
|
<latest>now</latest>
|
|
</default>
|
|
</input>
|
|
</fieldset>
|
|
<row>
|
|
<html>
|
|
<p>
|
|
This dashboard shows where users are logging on to the system from when they are logging in from an external location.
|
|
</p>
|
|
<p>
|
|
Note that methods that do not record an IP address (POP3, IMAP4, and Blackberry Enterprise Server) are not listed here.
|
|
</p>
|
|
</html>
|
|
</row>
|
|
<row>
|
|
<panel>
|
|
<map>
|
|
<search>
|
|
<query>
|
|
eventtype=client-iis-logs WebApplication="$selectedApp$" cs_username="$username$"
|
|
|eval isinternal=`is-internal-ip(c_ip)`|where isinternal==0
|
|
|iplocation c_ip
|
|
|eval WebApplication=lower(WebApplication)
|
|
|geostats dc(cs_username) by WebApplication
|
|
</query>
|
|
</search>
|
|
</map>
|
|
</panel>
|
|
</row>
|
|
</form> |