Working with Filters for Login Events in the Identity Collector

You can configure the Identity Collector to filter the login events. The Identity Collector sends to the Identity Server (Identity Awareness Gateway) only events that match the filter criteria.

To add a new Filter for login events in the Identity Collector:

  1. Open the Identity Collector application.

  2. From the top toolbar, click Filters.

  3. From the top toolbar, click New Filter ().

  4. Enter the name for the Filter to show in the Identity Collector.

  5. (Optional) Enter the comment.

  6. Configure the filter:

    • Network Filter - Defines IP addresses and networks to Include or Exclude.

    • Identity Filter - Defines user names and computer names to Include or Exclude.

    • Domain Filter - Defines domain names to Include or Exclude.

  7. Click OK.

To edit a current Filter for login events in the Identity Collector:

  1. Open the Identity Collector application.

  2. From the top toolbar, click Filters.

  3. Select the applicable Filter.

  4. From the top toolbar, click Edit Filter ().

  5. Configure the Filter:

    • Network Filter - Defines IP addresses and networks to Include or Exclude.

    • Identity Filter - Defines user names and computer names to Include or Exclude.

    • Domain Filter - Defines domain names to Include or Exclude.

  6. Click OK.

To delete a current Filter for login events in the Identity Collector:

  1. Open the Identity Collector application.

  2. From the top toolbar, click Filters.

  3. Select the applicable Filter.

  4. From the top toolbar, click Delete Filter ().

  5. Click Yes to confirm.

  6. Click OK.

Cache:

The cache saves associations (user-to-IP address) that the Identity Collector creates for a certain time (the default is 5 minutes). If the event happens again during that time, the Identity Collector does not send it to the Identity Server again.