Device Analytics report

The Device Analytics report can include devices running a supported version of the following operating systems:

• Windows
• macOS
• Chrome OS

To generate a Device Analytics report, you first need to activate the Device Usage policy in one or more custom policy groups.

Data is only available for device activity that occurs after the activation date of the Device Usage policy. Also, you need to wait at least a few days after activating the policy before you can see any logged activity in a report.

To create a Device Analytics report:

1. On the navigation bar, click Reports.
2. Under Categories, click Device, and then click Device Analytics.
3. Click Usage Report to open the Create Device Analytics Report dialog.
4. On the Set Properties page, enter a Report Name and Description (optional) for the report.
5. Click Next.

6. On the Define Scope page, select device groups and device group folders to compare. You can select up to 60 items, but note that as you select more items, the report may become less readable.

   • To select a device group or folder, select the item's checkbox.
   • To select a device group that is the child of a folder or device group, click the item's icon and select the child's checkbox.
   • To find a device group or folder, perform a search.
   • To compare your selected device groups against all active devices in your account, select the checkbox next to All active devices.
7. Click Next.

8. On the Create Series page under Select date range, click the field and select one of the following options:

   • Last month
   • Last 3 months
   • Last 6 months
   • Last 12 months
   • Custom

   The data available in the report is also determined by the activation date of the Device Usage policy. If you select a date range that begins before the activation date, data for the entire date range is not available.

9. If you selected Custom in the previous step, two date fields show. Specify a date range by clicking each field and selecting a date from the calendar. Dates more than one year in the past, or any date in the future, are not available.

10. The Series specifies the criteria upon which the report is based. To specify the report criteria, do the following:

    1. In the Series Name field, enter a name for your Series.

    2. Under Activity Type, you'll see that the following events are selected by default, meaning that the report will be based on both types of user events:

       • Login and Unlock
       • Device Activity

       To clear a selection, click its checkbox. You must select at least one activity type.

    3. Under Filters add one or more filters to further define the criteria on which to compare device groups. You can add filters based on any of the following data points:

       Data point	Description
       Event Time	The date and time (local time on the device) when the Login or Unlock event occurred To filter your report by event time: Click Add Filter and select Event Time (Local Device Time). Click the field next to between to show the time and day picker dialog. By default, All day is selected. To shorten the time period, enter a new start time and end time. For example, to include only daytime hours in the report, enter a start time of 8:00 AM and an end time of 5:59 PM. By default, Every day is selected. To clear a day of the week selection, click the day of the week. For example, to include only weekdays in the report, click S and S to exclude Saturday and Sunday. You must select at least one day of the week. When you're finished, click Done. The field next to between shows your time and day selections.
       SSID (Service Set Identifier)	An alphanumeric, 32 character value that uniquely identifies a wireless local-area network (WLAN)
       BSSID (Basic Service Set Identifier)	The MAC address of an access point within a WLAN
       Local IP address	The local Internet Protocol (IPv4) address that identifies a device connected to a private network
       Local IPv6 address	The local Internet Protocol (IPv6) address that identifies a device connected to a private network
       Public IP address	The public Internet Protocol (IPv4) address that identifies a device connected to the Internet
       Public IPv6 address	The public Internet Protocol (IPv6) address that identifies a device connected to the Internet
       Active Directory OU	The name of the Active Directory organizational unit that the device is associated with Administrators assign Group Policy settings and account permissions at the organizational unit level.
       Default Gateway	The name of the device that passes traffic from the local subnet to devices on other subnets The default gateway often connects a local network to the Internet, although internal gateways for local networks also exist.
       Domain	The name of the device's Windows domain, if applicable
       Username	The username of the user who was logged in to the device when an agent connection occurred If no user was logged in during the most recent agent connection, the last detected username shows.

       Filtering by any of the following data points excludes Chromebooks from the report: SSID, BSSID, Active Directory OU, Default Gateway, or Domain.

    4. If you want to remove the entire Series and start again, click Delete Series.

11. When you're finished creating the Series, click Create Report. The dialog closes and the report is generated.

    It may take a few moments to generate the report.

    The chart's horizontal axis shows a bar for each selected device group. The chart's vertical axis shows the number of devices. Each bar conveys the number of devices with the following attributes:

    • Activity occurred on the device during the selected date range

      -and-

    • The device meets the filter criteria specified in the Series

      For example, you select the following options:

      • Date range: Last 3 months
      • Activity type: Login and Unlock
      • Filter: Domain is not empty

      Your report will include all devices that are in a Windows domain, and a user logged in to or unlocked the device at least once in the past three months.

12. To export the report, click Report Options > Export.

13. Now that you've created your Device Analytics report, you can further customize your report by editing the bar chart or changing the columns in the results grid. To save your changes as a new report:

    1. Click Report Options> Save as.
    2. On the Save to a New Report dialog, enter a Report Name and Description for the new report and click Save.
    3. Click Close to close the confirmation message. The new report is added to the My Reports view of the Reports page and the Devices report category.

The results grid of the Device Analytics report shows the devices that are members of the selected device groups and device group folders and satisfy the Series criteria. It includes information about each device, organized in the following columns:

• Identifier The unique Electronic Serial Number (ESN) assigned to the Secure Endpoint Agent that is installed on a device.
• Username Username of the user who was logged in to the device when an agent connection occurred. If no user was logged in during the most recent agent connection, the last detected username shows. If you are viewing a report and want to see if a user was logged in during the most recent connection, add the Current Username column to the report. If no user was logged in at the time of the connection, "No Data" or two em dashes (— —) show in the column.
• Make The manufacturer of a device.
• Model The manufacturer's designated name for the type of device.

• Device Group The name of the device group that the device belongs to.

  Click a link to view the list of device groups and folders a device belongs to. Click OK to close the dialog.

  If the device belongs to more than one device group, the link text includes the name of the first (alphabetical) device group followed by "+ <#> more", where <#> is the number of device groups and folders the device belongs to.

  Possible values in the Device Group dialog are limited to the device groups and folders you selected for this report. If a device belongs to a device group you didn't select, that device group is not shown here. To view the complete list of device groups a device is associated with, open its Device Groups page.

• Device Name The name assigned to the device in the operating system. For Chromebooks, device name is not applicable and therefore shows as "Chrome" in the Secure Endpoint Console.
• Serial Number The identification number assigned to the device by the device manufacturer. For Windows devices, this value may correspond to the serial number of the BIOS, the motherboard, or the chassis, depending on the manufacturer.

The report also includes the following information about the usage of each device during the report's date range: