Event name to capture user login to QuickSight

Q&A
, ,
1

cloudtrail is used to log QuickSight activities.
“useridentity”.“type” is Directory. I am getting these eventname.

# eventname
1 BatchCreateUser
2 CreateAnalysis
3 CreateDataSet
4 CreateDataSource
5 CreateGroup
6 CreateGroupMembership
7 DescribeAnalysisPermissions
8 DescribeDashboardPermissions
9 DescribeDataSetPermissions
10 DescribeDataSourcePermissions
11 GetAnalysis
12 GetDashboard
13 GetStaticAsset
14 ListAnalyses
15 ListDashboards
16 ListDataSets
17 ListDataSources
18 ListGroupMemberships
19 ListGroups
20 ListNamespaces
21 ListThemes
22 ListUserGroups
23 ListUsers
24 PreviewDataSource
25 QueryDatabase
26 SearchGroups
27 SearchUsers
28 UpdateAnalysis
29 UpdateDashboard
30 UpdateDashboardAccess
31 UpdateDashboardPermissions
32 UpdateDataSet
33 UpdateTemplate
34 UploadStaticAsset

What is event name that captures user login?
How to get the duration a user stay in each dashboard?

2

Hi @lbl ,

I don’t know a way how to analyse the user login via cloudtrail.

Under Manage AWS => Manage Users you can find the last login date.

Do you want to capture the user login in cloudtrail? If yes, then a QuickSight member can mark this as a feature-request.

Best regards,
Nico

3

yes, to include user login event in cloudtrail.

how about duration of a user staying in each dashboard?

4

Hi @lbl

Unfortunately, I don’t know any way either.

@duncan , @Brett , @Xclipse do you know a way to analyse the user login behavior?

If not, could you please mark it as a feature-request for lbl?

Best regards,
Nico

1 Like
5

Hello @lbl & @Nico!

I would recommend checking out this blog:

1 Like
6

@duncan
I am using the blog for my implementation which led me to raise my question.
Thanks.

1 Like
7

Hello @lbl !

To find duration of a users session you will have to create a calculation that will measure the difference between their login event and most likely their last captured event.

If you wanted to measure how long a user was on a specific dashboard you will need to calculate the difference of when they entered the dashboard (GetDashboard) and when another event happens where you can assume they left the dashboard.

I see the use of something that is more specific to your use case so I will mark this as a feature request for the QuickSight team.