What is a one sentence summary of your feature request?
We need an audit report split by OU for broken seals
Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.
A report should be created that shows all broken seals. The report should display the password entry, the user who broke the seal, and the OU in which the password is located.
How do you currently solve the challenges you have by not having this feature?
Currently, there are two options for creating this report:
Report, All passwords
Filter: seals, broken
With this approach, only currently de-sealed passwords are output. If the de-sealing is reset, the passwords are no longer included in the report. The report can be broken down by OU, but it cannot be used for audit purposes because not all de-sealed passwords are listed.
Option 2:
Report, Logbook entries
Filter: logbook events, seal broken
With this approach, all passwords whose seals have been broken are listed, including the user who broke the seal. What’s missing is the ability to additionally filter the report by OUs, have the affected OU displayed, and inform the team lead about the breach.