Experience Center
Viewing the Users Dashboard
The Users dashboard (Analytics > Reports > Private Applications > Users) provides information about user activity in your organization.
Dashboard Tools
The Users dashboard displays the following information and functionality:
- Time Range Filter: View user data over a period between 1 Hour to 14 Days, or you can select Custom Range. If you use a Custom Range, the start and end date must be within the last 14 days. The end time can be configured to the selected time in hours and minutes. By default, the dashboard displays information for events that occurred in the last hour. This filter applies to all widgets on the dashboard except Current Connected Users, which displays users for up to the last 30 minutes.
Log information in the dashboard is limited to 14 days. For longer access to the logs, use the Log Streaming Service (LSS).
- Refresh Icon: Refresh the dashboard to reflect the most current information.
- Recent Users: View the total number for this category at the top of the page, and then view its details in the widget below. This number is based on the users that accessed applications, and it includes all successful and unsuccessful transactions.
- Current Connected Users: View the total number for this category at the top of the page, and then view its details in the widget below. This number is based on the users who have logged into the Zscaler Client Connector and who are authenticated and connected to Private Applications.
- Policy Blocks: View the total numbers for this category at the top of the page, and then view its details in the widget below.
Widgets
The Users dashboard provides the following widgets:
- Recent Users
This widget displays real-time information about the total number of users that requested applications and successful machine tunnel connections over the selected time frame. The widget always uses the current time for its end time even if a custom time range with a different end time is selected.
For users accessing applications using Browser Access through unauthenticated HTTP preflight OPTIONS request, the username will appear as Private Applications BA Unauthenticated. To learn more, see Configuring Application Segments.
- Click the navigation tabs to view a list of users or machine tunnels.
- Click on a user or machine tunnel to view more details in Diagnostics.
- Click the Download icon (
) to export a file (.csv) containing information on the users that accessed applications or successful machine tunnel connections with Private Applications for the selected time frame (i.e., Timestamp (in UTC) and username).
- Current Connected Users
This widget displays real-time information of users and machine tunnels currently connected to Private Application.
- Click on the navigation tabs to view a list of users or machine tunnels.
- Hover over a user or machine tunnel to view the following:
- Logged In Time: The time user logged in.
- IP Address: IP address of the user's device.
- User Location: Location user is connecting from.
- Click on a user or machine tunnel to view more details in Diagnostics.
- Click the Download icon () to export a file (.csv) containing information on the users or machine tunnels that are currently accessing applications with Private Applications for up to the last 30 minutes.
- Users Blocked by Policies
This widget displays users that have been blocked by your organization's configured policies in the selected time frame.
- Hover over a user to view the following:
- Name: The username. This is the NameID in the SAML assertion from the IdP and not the username entered in Zscaler Client Connector.
- # of Policy Blocks: The number of times the user was blocked by a policy in the selected time frame and the percentage that number represents of the total number of times users were blocked by policies, as shown in the widget.
- Click on a user to view more details in Diagnostics.
- Hover over a user to view the following:
- Top Users by Applications
This widget displays the top ten users of applications in the selected time frame. The percentage of total transactions for the top users by applications appears in the top right corner.
- Hover over a user to view the following:
- Name: The username. This is the NameID in the SAML assertion from the IdP and not the username entered in Zscaler Client Connector.
- # of App(s): The number of applications accessed by the user in the selected time frame and the percentage that amount represents of the total number of applications the top ten users accessed, as shown in the widget.
- Click on a user to view more details in Diagnostics.
- Hover over a user to view the following:
- Top Users by Bandwidth
This widget displays the top ten consumers of bandwidth in the selected time frame. The percentage of total transactions for the top users by bandwidth appears in the top right corner.
- Hover over a user to view the following:
- Name: The username. This is the NameID in the SAML assertion from the IdP and not the username entered in Zscaler Client Connector.
- Bandwidth: The amount of bandwidth consumed by the user in the selected time frame and the percentage that number represents of the total bandwidth consumed by the ten users shown in the widget.
- Click on a user to view more details in Diagnostics.
- Hover over a user to view the following:
- Top Policies by Blocked Users
This widget displays the top ten policies that blocked users in the selected time frame.
- Hover over a policy to view the following:
- Name: The policy name.
- # of Policy Blocks: The number of users the policy blocked in the selected time frame and the percentage that number represents of the total number of users blocked by the ten policies shown in the widget.
- Click on a policy to view more details in Diagnostics.
- Hover over a policy to view the following:
If you are using the Log Streaming Service (LSS), the Users dashboard includes information for a Private Applications LSS Client user. This user represents the LSS service, not an actual user. Also, each log receiver is displayed as an application, to reflect the data coming in from the service. To learn more, including how to stop the LSS service from streaming Private Applications LSS Client logs, see Configuring a Log Receiver.