Access Outliers by selecting Outliers from the iManage Threat Manager Home Screen or navigation bar.
A table with a list of outliers (as identified according to the scope and activities selected) is displayed. For more information, refer to Identifying Outliers: Interpreting the data.
The default scope and activities for the Outliers can be modified, and in such a case, the report results will be recalculated immediately.
In this section:
Changing the Scope of the Outliers report
The default scope for the Outliers report is displayed at the top of the page, but you can modify this.
Defining the Date Range
Specifying People to Include or Exclude
Defining the Date Range
On the Outliers page, select the Date Range button in the upper left of the window. The Date Range dialog box displays.
You can select Last Week, Last Month, Last 3 Months, Last 6 Months, Last Year or specify a Custom date range. The default date range is based on the system default set by the Configuration Manager.
Select OK to confirm your chosen date range or Cancel to ignore any changes to the date range.
If you don't need to make any further changes to the report, select Apply. The new date range is applied and the results are displayed immediately.
Specifying People to Include or Exclude
People to Include
To include users or groups in the Outliers report:
Select Include in the upper part of the page to open the People to Include dialog box.
Select the list of users and groups you want to run the report on. The default selection is Everyone.
You can search for users or groups by using the Filter by Name search bar or by using the filter button to filter by users, groups, location, or other properties that may be available.
You can select and deselect a user or group by clicking the specific row or by selecting the check box beside the user or group name.
To deselect all, use Deselect beside the counts for selected users/groups and remaining users/groups, or by selecting the icon by the selected users count.
To view active members of a group, select the View Members button beside the group ID. The group members are shown in a scrollable tool tip.
To view the current selection, select the View Selected button.
Select OK to confirm your users/groups to include, or select Cancel to discard changes.
If you don't need to make any further changes to the report, select Apply. The new scope is applied and the results are displayed immediately.
People to Exclude
To exclude users from the Outliers report:
Select the Exclude button in the upper part of the page to open the People to Exclude dialog box. The Global Exclusions List is selected by default. This implies that activities for those users listed in the Global Exclusions list are excluded from the report.
You can disable this option by deselecting Global Exclusions List.
Select the users or groups you wish to exclude from the report:
You can search for users or groups by using the ‘Filter by Name’ search bar or by using the filter button to filter by users, groups, location, or other properties that may be available.
You can select and deselect a user or group by clicking the specific row or by selecting the check box beside the user or group name.
To deselect all, use the Deselect button beside the counts for selected users/groups and remaining users/groups.
To view active members of a group, select the ‘View Members’ button beside the group ID. The group members will be shown in a scroll-able tool tip.
To view current selection, select the ‘View Selected’ button.
Select OK to confirm your users/groups to include, or select Cancel to discard changes.
If you don't need to make any further changes to the report, select Apply. The new scope is applied and the results are displayed immediately.
Changing the Activities analyzed for the Outliers report
The Activities field displays the activities that are analyzed to generate the unique document, unique client, and unique matter counts.
For example: in a single month, a user imported (checked in) 3,000 emails, exported 100 documents, opened 50 documents, printed 30 documents, and Checkin wasn't part of the Activity set selected; the 3,000 emails wouldn't be reflected in the unique document, unique client and unique matter counts. This makes intuitive sense because typically imports or checkins aren't regarded as at-risk activities.
Select Activities. The Add/Remove Activities dialog box appears. The Add/Remove Activities dialog box enables you to select the activities that you wish to be included in the analysis. For more information about activities, refer to What are Activities? in Frequently Asked Questions.
Select the check boxes to select the required activities.
Alternatively, you can select a predefined activity set. All the activities that are part of that activity set get selected by default. For more information on activity sets and how to create activity sets, refer to Settings > Activity Sets tab in the Configuration > Settings section of iManage Threat Manager Administration Help.Select Update. The updated Activities are immediately applied and the results are displayed.