View user activity
The CMC User Activity dashboard provides statistical information to Splunk Cloud Platform administrators about all users with access to your Splunk Cloud Platform deployment, including their pageviews and apps. Use this dashboard to understand your users' activity and take the appropriate action to monitor their behavior.
Review the User Activity dashboard
This dashboard shows summary and detailed information about user activity within a specified time range. The time range value affects all panels. The dashboard generally shows information for multiple users, but this is dependent on the number of users active during the specified time range.
The top three panels are summarized totals of a particular area: users, apps, or pageviews. You use the middle three panels to analyze more specific data about each area by setting a Sort by option. The bottom panel provides a tabular summary of the Total Pageviews panel.
The Pageviews area contains two panels with a variable in the panel title that you set with a filter option: Top <variable> and <variable> Access over Time.
To investigate your panels, go to Cloud Monitoring Console > Usage > User Activity. Use the following table to understand the dashboard interface.
| Panel or Filter | Description |
|---|---|
| Time Range | Set the time range for the data display.
This time range setting affects the display of all panels on this page. |
| Distinct Users | Shows the total number of distinct users who were active in the specified time range.
To view the individual users included in this total and their access activity, sort by User in Pageviews. |
| Distinct Apps | Shows the total number of distinct apps that were active in the specified time range.
To view the individual apps in this total and their access activity, sort by App in Pageviews. |
| Total Pageviews | Shows the number of total pageviews that were accessed in the specified time range.
To view the individual pages in this total and their access activity, sort by Page in Pageviews. |
| Pageviews | This area includes the Top <variable> and <variable> Access over Time panels. The <variable> changes depending on the selected Sort by option.
Select a Sort by option to view data by user, app, or page. The panels show the following pie chart and a bar chart combinations:
|
| Activity by Page | Shows the number of distinct users and pageviews for a specific app page.
Like the Top Pages and Page Access over Time panels, this panel provides additional information for the Total Pageviews panel. |
Interpret user activity results
When interpreting your user activity results, note the following:
- When analyzing a particular area, be sure to select the corresponding Sort by option in Pageviews so that you view the summarized total and detail information together. For example, select Users when you are investigating distinct users to include the information at the Top Users and User Access over Time panels.
- If a particular user has a large number of pageviews, this might indicate that users are sharing credentials, or that the account is being used on a dashboard with multiple refreshes, creating additional search load.