Outliers investigative reports

An Outliers report shows which users have the most unusual Internet activity in the database. A report query calculates the average activity for all users per category, per day, per action (disposition), and per protocol. It then displays the user activity that has the most statistically significant variance from the average. Variance is calculated as the standard deviation from the mean.

Steps

  1. On the main Investigative Reports page, generate a summary report that displays the information for which you want to see outliers. The report selections underlined and shown in blue beside the Internet Use by field are reflected in the Outliers report.
    For example, to view outliers by hits for a particular category, select Category in the Internet Use by list, and select Hits as the Measure.
    Note: Outliers reports cannot be generated for browse time. If you start from a summary report showing browse time, the Outliers report is based on hits.
  2. Click Outliers.

    The rows are sorted in descending order with the highest variance shown first. Each row shows:

    • Total (hits or bandwidth) for the user, category, protocol, day, and action.
    • Average (hits or bandwidth) for all users, for that category, protocol, day, and action.
    • Variance from the average for the user.
  3. To see an individual user’s activity in this category over time, click the user name.
    For example, if one user’s activity is noticeably high for a certain day, click that user’s name to see a report that gives a more in-depth understanding of the user’s overall activity.