Keycyte PAM 3.2 · Administrator Guide
Using Session Reports
The session report summarizes the sessions that users opened through Keycyte PAM. The Overview tab gives a fixed set of charts and top lists; the Detailed analysis tab lets you filter sessions in detail, group them the way you need, and export the result.
To open the report, select Reports > Session.
Selecting the Period
The date selector in the toolbar applies to both tabs. Select Last 1 Day, Last 1 Week (default), Last 1 Month, Last 3 Months, Last 6 Months, Last 1 Year or Custom Range. To reload the data, click Refresh.
Overview Tab
The summary cards show Total Connections (with the number of currently active sessions), Active Users, Active Servers and Avg Session Duration.
The tab also contains:
| Section | Content |
|---|---|
| Top Users, Top Servers | Charts of the users and servers with the most connections. |
| Protocol Usage | Share of each protocol. |
| Peak Hours | Connections by hour of day. |
| Top Connecting Users | Users with the most connections, with their share of the total. |
| Most Connected Servers | Servers with the most connections, with address and protocol. |
| Protocol Statistics | Connections and average duration per protocol. |
| Security Alerts | Connections made at unusual hours, with user, server, time and risk. |
To export the overview, select a format (Excel (.xlsx), PDF (.pdf) or CSV (.csv)) and a report type (Full Report, Summary or Security Report) in the toolbar, then click Export.
Detailed Analysis Tab
The Detailed analysis tab answers questions such as “who connected to this server outside working hours last month” or “how much time did each user spend with this account”.
Filtering Sessions
To filter the sessions:
-
Click Filters to open the filter panel.
-
Set the filters you need. Empty filters match everything.
Group Filters Who Users, User types (Local, Domain, RADIUS, Entra ID), User roles. Where Servers, Protocols, Server tags, Server roles. With which account Target accounts, Account types, Account scope (Any, Shared vault, Private vault). When Start hour (from–to), Weekdays, Off-hours only (before 08:00 / after 22:00), Include open sessions. Session Session types (User session, Shared session, Admin watch), Duration (minimum and maximum, in minutes), Close reasons (including Any error), Recording (Any, Recorded, Not recorded). Client Client IP (a single address, a prefix such as 10.10.5., or a CIDR range such as10.10.0.0/16), Client types. -
Click Apply.
The active filters are shown as chips; to remove all of them, click Clear filters.
Note
The Recording filter uses the recording information stored with each session. Sessions recorded before this information was stored count as not recorded.
Saving Filters
You can save a set of filters to reuse it later.
- Set the filters.
- Click Save filter and select Save as new….
- Enter a Name. To make the filter available to every user of the report, select Shared with everyone.
- Click Save.
To apply a saved filter, select it in the Saved filters list. If you change the filters after applying it, the filter is marked as modified; click the reapply button to return to the saved state. Use Update saved filter and Delete saved filter to change or remove it. Only the owner of a shared filter, or a MASTER user, can change or delete it.
Grouping and Comparing
In Group by, select how to group the sessions:
- User, Server, Target account, Protocol, Client IP
- User × Server, User × Account
- Day, Week, Month, Hour of day, Weekday
Each row shows the number of sessions, total and average time, the longest session, the number of distinct users, servers and accounts, the top server or user, the first and last session, the number of off-hours sessions and the number of sessions that were closed by force. Expand a row to see the breakdown by a second dimension. To open the matching sessions, click Open in Session History in the row.
A trend chart above the table shows sessions per day or per week.
To compare with the previous period of the same length, select Compare with previous period. The table then shows the previous values next to the current ones.
If there are too many groups, only the first groups are shown and a warning asks you to narrow the filters.
Exporting the Analysis
To export the current table, click Excel or CSV.