Results: New accounting sessions

Overview

The NEW ACCOUNTING SESSIONS report in the GATE admin portal provides comprehensive monitoring and anomaly detection for AAA (Authentication, Authorization, and Accounting) server sessions. This page displays time-series data with advanced analytics capabilities, allowing administrators to track session counts, identify anomalies, and analyze patterns over time.

Key Features

• Real-time Session Monitoring: Visualizes accounting session data with interactive line graphs showing session counts over time
• Anomaly Detection: Automated detection system that identifies unusual session patterns and flags them with distance metrics
• Time-series Analysis: Displays historical session data with customizable time intervals
• Multi-organization Support: Includes sub-organization filtering capabilities
• Export Functionality: Allows data export for external analysis and reporting
• Configurable Sensitivity: Adjustable anomaly detection parameters for fine-tuned monitoring

UI Elements

Top Action Bar

• Refresh Button (circular arrows): Reloads the report data
• Off Toggle: Controls report auto-refresh status
• Análisis AI: Accesses AI-powered analysis features
• Reports: Navigation to other report types
• Export: Exports data in various formats
• Save Button (bookmark icon): Saves current report configuration
• Share Button: Shares report with other users
• Filter Toggle (green checkmark): Opens/closes the filter panel
• Display Options:
  • Line chart view
  • CSV export
  • Legend toggle

Filter Panel (Right Sidebar)

Anomaly Detection Settings

• Active: Checkbox to enable/disable anomaly detection (currently checked)
• Data sample (%): Dropdown set to "10%" - controls the percentage of data used for analysis
• Sensitivity: Dropdown set to "Very high" - adjusts the threshold for anomaly detection

Time Configuration

• Interval: Set to "Hours" with "24 hours" selected - defines the time window for data aggregation
• Complete intervals: Checkbox option for interval boundary alignment
• Use from date: Checkbox for custom date range selection

Organization Filters

• Organization: Shows "Zequenze" tag with an "X" for removal
• Sub-organizations: Checkbox (checked) to include data from sub-organizations

Time Zone

• Time zone: Dropdown showing "America/Mexico_City" - sets the timezone for all timestamps

Report Cache Management

• Clear report cache: Button to refresh cached report data for updated results

Main Chart Area

The line graph displays:

• X-axis: Date/time stamps (Apr 14 10:00 pm through Apr 15 7:00 pm)
• Y-axis: Session count (scale from 10 to 70)
• Orange data points: Mark specific time intervals on the timeline
• Trend line: Shows session count progression over time with a stable pattern around 60-61 sessions, followed by a dramatic drop to approximately 10 sessions at the end of the period

Data Table

Columns include:

• Date/time: Timestamp with clickable link icon for drill-down
• Count: Session count value (ranging from 4.0 to 61.0)
• Anomaly distance: Numeric value showing deviation from normal (-11.03 to 0.2)
• Anomaly detected: Visual indicator (green checkmark or red dot)

User Interactions

Viewing Session Data

1. The chart automatically displays session trends based on active filters
2. Hover over data points on the line graph to see detailed values
3. Click on timestamps in the table to view session details
4. Scroll through the table to review all 24 results

Applying Filters

1. Click the FILTER button in the top-right to open the filter panel
2. Adjust anomaly detection parameters:
   • Toggle "Active" to enable/disable detection
   • Modify "Data sample (%)" for analysis depth
   • Change "Sensitivity" level (Very high, High, Medium, Low)
3. Set time interval preferences (hours, days, weeks, months)
4. Select organization and include/exclude sub-organizations
5. Choose appropriate timezone for data display
6. Use Clear report cache to refresh cached data when needed
7. Click Proceed to apply changes

Analyzing Anomalies

• Review rows marked with red dots in the "Anomaly detected" column
• Check "Anomaly distance" values - higher absolute numbers indicate greater deviation
• Orange data points on the chart mark time intervals for analysis
• The chart shows a significant dramatic drop at the end of the monitoring period

Exporting Data

1. Click the Export button in the top toolbar
2. Choose between:
   • Line chart view for visual export
   • CSV format for raw data export
3. Click Legend to include/exclude legend in exports

Navigation

Accessing This Page

From the left sidebar:

1. Navigate to APPLICATIONS section
2. Expand AAA services
3. Select Accounting
4. Click on Reports

Breadcrumb Navigation

Located at the top: Home > AAA server > Results

Related Sections

• Profiles: User profile management
• Clients: AAA client configuration
• Dictionaries: Attribute definitions
• Logs: Detailed logging information
• Files: File management for configurations

Data Displayed

Session Metrics

• Count: Total number of accounting sessions in each time interval
• Date/time: Precise timestamp for each data point
• Anomaly distance: Statistical measure of deviation from expected values (negative values indicate below-normal activity, positive values indicate above-normal)

Anomaly Indicators

• Green checkmark: Normal session activity within expected parameters
• Red dot: Anomaly detected based on configured sensitivity and window size
• Orange markers: Visual data points on the timeline chart

Current Data Set

The report shows 24 results spanning from 15 Apr 2026 21:00 to 14 Apr 2026 22:00, with:

• Session counts ranging from 4.0 to 61.0
• One major anomaly at 21:00 with -11.03 distance and 4.0 count
• Multiple sessions showing normal activity with 0.0 anomaly distance
• Several additional minor anomalies detected with -0.2 distance values

Actions Available

Primary Actions

• Proceed: Applies current filter configuration and refreshes data
• Análisis AI: Launches AI-powered analysis tools for deeper insights
• Export: Downloads report data in selected format
• Share: Distributes report to team members or stakeholders
• Save: Preserves current view configuration for future use

Data Management

• Refresh: Manually updates the report with latest data
• Toggle Auto-refresh: Enables/disables automatic data updates
• Clear report cache: Refreshes cached report data for updated results
• Clear Filters: Removes active filters by clicking "X" on filter tags

Drill-down Capabilities

• Click on any timestamp link (blue link with arrow icon) to view detailed session information
• Access individual session records for troubleshooting and analysis

Notes/Tips

Best Practices

• Sensitivity Settings: Start with "Very high" sensitivity to catch all potential anomalies, then adjust based on false positive rates
• Data Sampling: 10% sample size is suitable for large datasets; increase for more precise anomaly detection on smaller datasets
• Time Intervals: 24-hour intervals provide good balance between detail and overview for most monitoring scenarios
• Cache Management: Use "Clear report cache" when data appears outdated or after configuration changes

Interpreting Anomalies

• Negative anomaly distance: Indicates unusually low session counts (potential service issues)
• Positive anomaly distance: Indicates unusually high session counts (potential security events or legitimate traffic spikes)
• Zero distance: Sessions within normal expected range

Performance Considerations

• Enable "Sub-organizations" only when cross-organizational analysis is required
• Use appropriate time intervals to balance detail vs. system performance
• Export to CSV for complex analysis in external tools like Excel or data analysis platforms
• Clear report cache periodically for optimal performance

Troubleshooting

• If no anomalies appear but issues are suspected, lower the sensitivity setting
• Verify timezone settings match your operational requirements
• Check that the "Active" checkbox is enabled for anomaly detection to function
• Ensure "Zequenze" organization filter is correctly applied for relevant data
• Use "Clear report cache" if data appears stale or inconsistent

URL Parameters

The page URL contains several parameters that define the current view:

• visualization_type=line: Display mode
• organization__in=2: Organization ID filter
• suborgs=1: Sub-organizations included
• interval=24h: 24-hour time intervals
• anomaly=1: Anomaly detection enabled
• window=10: Detection window size
• sigma=1: Statistical sensitivity parameter