Example 7: Counted audit and monitoring service computers

The following example shows the next portion of report Section 2, containing information about counted computers where audit and monitoring service (DirectAudit) features are used. Information includes the system name, the timestamp of the most recent communication with a collector, OS and agent versions, status (see Status information for managed and audited computers), license type (see License type information for managed and audited computers), and remarks (see Remarks for managed and audited computers).

Vault-based systems are your Windows, UNIX, and/or network devices that are managed by and audited by the Centrify Authentication Service, Privilege Elevation Service, and Audit & Monitoring Service.

Note that the remarks string for one computer states “Orphaned,” but the computer is still counted because audited computers are counted even when they are orphaned (unlike DirectControl/DirectAuthorize computers).

Information about these counted computers is collected and reported in Section 1 of the report, as shown in Example 1: Agent, license type and count through Example 4: License detail summaries.

This example shows the layout of this section and example data. Depending on what types of Centrify licenses you have in your environment, your own licensing report might not use all of the layout entries shown here:

System Report of Counted Usage for DirectAudit 

Number of Systems - Counted DirectAudit Server - ALL (summary),# 

Number of Systems - Counted DirectAudit Workstation – ALL (summary),# 

Number of Systems - Counted DirectAudit - Grand Total,# 

System,Last Connection,OS,Agent Version,Status,DirectAudit Installation,License Type,Join Time,Remarks 


"ORiVwQ8knZ","dd MMM yyyy HH:mm:ss zzz","Windows",3.7.0-324,Active,"Rc6xacwgT4",Workstation","31 Mar 2020 18:14:18 +08:00","None"
			
"bWvITEczZz","dd MMM yyyy HH:mm:ss zzz","UNIX/Linux",Unknown (2.0 or later),Active,"GB2XttuUn3",None,"Unknown","Vault-based system"
			
"+N9dz1sMCK","dd MMM yyyy HH:mm:ss zzz","Windows",Unknown (2.0 or later),Active,"f0JlAU2iva",Server,"Unknown",Vault-based system"
			
"vRGdi5XdYd","dd MMM yyyy HH:mm:ss zzz","UNIX/Linux",3.7.0-135,Active,"xiAKQayRc0",None,Unknown,"Orphaned"
			
"DzFIs6sbyG","dd MMM yyyy HH:mm:ss zzz","UNIX/Linux",3.7.0-135,Active,"zP0V7QsMEG",Workstation,"31 Mar 2020 18:14:18 +08:00","None"
			
"xnSXEWuUPM","dd MMM yyyy HH:mm:ss zzz","UNIX/Linux",Unknown (1.3 or earlier,Active,"qZ3cKtElMz"),None,"Unknown","None"