|
Breakdown by number of correct answers |
Displays a table of count of users based on the correctly answered
phishing training.
Hide Query Show Query #Vendor="mimecast"
| #event.module="emailsecurity"
| #event.dataset="emailsecurity.awareness-training-user-data"
| Vendor.email=*
| Vendor.templateName=?template-name
| groupBy(["Vendor.email", "Vendor.templateName"], function=tail(1))
| groupBy(["Vendor.numCorrectAnswers"], function=count(as="User count"))
| rename(field="Vendor.numCorrectAnswers", as="Correct answers")
| Table |
|
Users clicked on phishing data |
Displays a table showing details of users who clicked on phishing
links.
Hide Query Show Query #Vendor="mimecast"
| #event.module="emailsecurity"
| #event.dataset="emailsecurity.awareness-training-user-data"
| Vendor.status="CLICKED"
| groupBy(["Vendor.email", "Vendor.templateName"], function=tail(1))
| table(["Vendor.email", "Vendor.reactionTime", "Vendor.timeClicked", "Vendor.timeOpened", "Vendor.templateName"], sortby="Vendor.reactionTime")
| rename(field=[["Vendor.email", "Email"], ["Vendor.reactionTime", "Reaction time"], ["Vendor.timeClicked", "Clicked timestamp"], ["Vendor.timeOpened", "Opened timestamp"], ["Vendor.templateName", "Template name"]])
| Table |
|
Breakdown by watchlist count |
Displays a table of a count of users based on the number of videos
in the watchlist.
Hide Query Show Query #Vendor="mimecast"
| #event.module="emailsecurity"
| #event.dataset="emailsecurity.awareness-training-watchlist-details"
| Vendor.email=*
| groupBy(["Vendor.email"], function=tail(1))
| groupBy(["Vendor.watchlistCount"], function=count(as="User count"))
| rename(field="Vendor.watchlistCount", as="Watchlist videos")
| Table |
|
Breakdown by number of campaigns clicked |
Displays a table of a count of users based on the phishing links
clicked by the user.
Hide Query Show Query #Vendor="mimecast"
| #event.module="emailsecurity"
| #event.dataset="emailsecurity.awareness-training-user-data"
| Vendor.email=*
| Vendor.templateName=?template-name
| groupBy(["Vendor.email", "Vendor.templateName"], function=tail(1))
| groupBy(["Vendor.numCampaignsClicked"], function=count(as="User count"))
| rename(field="Vendor.numCampaignsClicked", as="Phishing clicks")
| Table |
|
Breakdown by correct number |
Displays a table of a count of users based on the correctly
answered questions.
Hide Query Show Query #Vendor="mimecast"
| #event.module="emailsecurity"
| #event.dataset="emailsecurity.awareness-training-performance-details"
| Vendor.email=*
| groupBy(["Vendor.email"], function=tail(1))
| groupBy(["Vendor.numCorrect"], function=count(as="User count"))
| rename(field="Vendor.numCorrect", as="Correct video answers")
| Table |
|
Breakdown by number of campaigns sent |
Displays a table of a count of users based on the number of
campaigns sent to users.
Hide Query Show Query #Vendor="mimecast"
| #event.module="emailsecurity"
| #event.dataset="emailsecurity.awareness-training-user-data"
| Vendor.email=*
| Vendor.templateName=?template-name
| groupBy(["Vendor.email", "Vendor.templateName"], function=tail(1))
| groupBy(["Vendor.numCampaignsSent"], function=count(as="User count"))
| rename(field="Vendor.numCampaignsSent", as="Phishing campaigns sent")
| Table |
|
Breakdown by incorrect number |
Displays a table of a count of users based on the incorrectlu
answered questions.
Hide Query Show Query #Vendor="mimecast"
| #event.module="emailsecurity"
| #event.dataset="emailsecurity.awareness-training-performance-details"
| Vendor.email=*
| groupBy(["Vendor.email"], function=tail(1))
| groupBy(["Vendor.numIncorrect"], function=count(as="User count"))
| rename(field="Vendor.numIncorrect", as="Incorrect video answers")
| Table |
|
Breakdown by number of incorrect answers |
Displays a table of count of users based on the incorrectly
answered phishing training.
Hide Query Show Query #Vendor="mimecast"
| #event.module="emailsecurity"
| #event.dataset="emailsecurity.awareness-training-user-data"
| Vendor.email=*
| Vendor.templateName=?template-name
| groupBy(["Vendor.email", "Vendor.templateName"], function=tail(1))
| groupBy(["Vendor.numIncorrectAnswers"], function=count(as="User count"))
| rename(field="Vendor.numIncorrectAnswers", as="Incorrect answers")
| Table |
|
Breakdown by template name |
Displays a table of a count of users based on template name.
Hide Query Show Query #Vendor="mimecast"
| #event.module="emailsecurity"
| #event.dataset="emailsecurity.awareness-training-user-data"
| Vendor.email=*
| groupBy(["Vendor.email", "Vendor.templateName"], function=tail(1))
| groupBy(["Vendor.templateName"], function=count(as="User count"))
| rename(field="Vendor.templateName", as="Template name")
| sort("User count")
| Table |
|
Breakdown by number of training modules assigned |
Displays a table of a count of users based on the number of
training modules assigned to users.
Hide Query Show Query #Vendor="mimecast"
| #event.module="emailsecurity"
| #event.dataset="emailsecurity.awareness-training-user-data"
| Vendor.email=*
| Vendor.templateName=?template-name
| groupBy(["Vendor.email", "Vendor.templateName"], function=tail(1))
| groupBy(["Vendor.numTrainingModulesAssigned"], function=count(as="User count"))
| rename(field="Vendor.numTrainingModulesAssigned", as="Training modules assigned")
| Table |
|
Breakdown by number not watched |
Displays a table of a count of users based on number of unwateched
videos.
Hide Query Show Query #Vendor="mimecast"
| #event.module="emailsecurity"
| #event.dataset="emailsecurity.awareness-training-performance-details"
| Vendor.email=*
| groupBy(["Vendor.email"], function=tail(1))
| groupBy(["Vendor.numNotWatched"], function=count(as="User count"))
| rename(field="Vendor.numNotWatched", as="Unwatched videos")
| Table |
|
Breakdown by clicked IP |
Displays a table of a count of users based on IP address from
where the click was made.
Hide Query Show Query #Vendor="mimecast"
| #event.module="emailsecurity"
| #event.dataset="emailsecurity.awareness-training-user-data"
| Vendor.email=*
| Vendor.templateName=?template-name
| groupBy(["Vendor.email", "Vendor.templateName"], function=tail(1))
| groupBy(["Vendor.clickedIp"], function=count(as="User count"))
| rename(field="Vendor.clickedIp", as="Clicked IP")
| Table |
|
parameter-panel-1745316094934-0 | | parameterPanel |
