close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

show services user-identification active-directory-access statistics

date_range 19-Nov-23

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
show services user-identification active-directory-access statistics
(ip-user-mapping | ip-user-probe | user-group-mapping) <domain name>

Description

Display statistics about IP address-to-user mapping, user-to-group mapping, and IP user probes used for the integrated user firewall feature. If two domains are configured, output is provided per domain.

Options

ip-user-mapping—Number of total queries and failed queries to the event log on the domain controller for address-to-user mappings. Includes additional information, such as the log scan interval and the timestamp of the last event read.
ip-user-probe—Number of total PC probes and failed probes.
user-group-mapping—Number of total queries and failed queries to the LDAP server for user-to-group mappings
domain name—(Optional) Display the statistics for the specified domain.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show services user-identification active-directory-access statistics ip-user-mapping command.

Table 1: show services user-identification active-directory-access statistics ip-user-mapping Output Fields
Field Name	Field Description
`Host`	IP address of the domain controller.
`Initial event log timespan`	When the feature is first deployed, the number of previous hours for which the event log on the domain controller is read. A one means the last hour of the event log is read.
`Eventlog scan interval`	Number of seconds between event log scans.
`Total log query number`	Count of the queries on the event log.
`Failed log query number`	Count of the failed queries on the event log.
`Log read number`	Count of the times the event log was read.
`Latest timestamp`	Year:month:date:hours:minutes:seconds is the timestamp taken from the event log. Timestamp records the latest statistics updated time of the SRX Series Firewalls.

Table 2 lists the output fields for the show services user-identification active-directory-access statistics ip-user-probe command.

Table 2: show services user-identification active-directory-access statistics ip-user-probe Output Fields
Field Name	Field Description
`Total user probe number`	Count of the probes of IP addresses to get IP address-to-user mappings.
`Failed user probe number`	Count of failed probe attempts.

Table 3 lists the output fields for the show services user-identification active-directory-access statistics user-group-mapping command.

Table 3: show services user-identification active-directory-access statistics user-group-mapping Output Fields
Field Name	Field Description
`Host`	IP address and port being queried.
`Total query number`	Count of queries.
`Failed query number`	Count of failed query attempts.

Sample Output