Digital Guardian 5.6.0 Analytics and Reporting Cloud - Administrator's Guide

Oct 24, 2026

Administrator’s Guide for Digital Guardian Analytics and Reporting Cloud (ARC) version 5.6.0, covering tenant-based data separation and secure management. Describes how ARC organizes System Tenant (tenant 0) and Normal Tenants (tenant 1+) with their respective capabilities for investigating data, managing users and roles, creating and scheduling reports, and filtering incoming events. Includes procedures for configuring enterprise tenants, alarm assignment, archived agent data retention, event filter groups, and ARC permission hierarchies, plus integrations for threat intelligence services and notification setup.

LanguageEnglish

CategoryTechnology

FormatPDF

Pages93

Reading Time3 h 54 min

AccessFree to download

Working With Tenants

Managing Tenants

Copying Tenant Values

Disabling Tenants

Enabling Tenants

Deleting Tenants

Enterprise Tenants Features

Creating Enterprise Tenants

Making a Tenant an Enterprise Tenant

Working with Alarms and Enterprise Tenants

Scheduled Reports and Enterprise Tenants

Selecting Tenants to Receive Scheduled Reports

Filtering Events in Tenants

Creating Event Filter Groups

Creating Event Filters

Exporting Event Filter Groups

Importing Event Filters

Managing Archived Agent Data

Archive Data Storage

Configuring the Tenant Data Archive

Reports

Event Detection Options

ARC Detection Rules

About Watchlists

Managing Users in ARC

Adding User Roles

Admin Page Permissions

Understanding the ARC Permissions Hierarchy

Configuring Email Notifications and Threat Intelligence

Configuring Tenants to use VirusTotal

Fortra Threat Brain Integration

Integrating UserPilot with ARC

Localization

Configuring SMTP Mail Services

Analytics & Reporting Cloud Version 5.6.0 Administrator's Guide Copyright Terms and Conditions Copyright © Fortra, LLC and its group of companies. All trademarks and registered trademarks are the property of their respective owners. The content in this document is protected by the Copyright Laws of the United States of America and other countries worldwide. The unauthorized use and/or duplication of this material without express and written permission from Fortra is strictly prohibited. Excerpts and links may be used, provided that full and clear credit is given to Fortra with appropriate and specific direction to the original content. 202510220233 | Administrator's Guide | [www.fortra.com](www.fortra.com) | page: ii | | --- | --- | --- | Table of Contents Working With Tenants 5 Managing Tenants 6 Copying Tenant Values 11 Disabling Tenants 14 Enabling Tenants 15 Deleting Tenants 15 Working With Enterprise Tenants 18 Enterprise Tenants Features 18 Child Tenant Features 18 Creating Enterprise Tenants 20 Making a Tenant an Enterprise Tenant 20 Working with Alarms and Enterprise Tenants 20 Managing Alarm Assignee, Status and Comments 21 Working with Shared Content and Enterprise Tenants 22 Working with Incidents and Enterprise Tenants 22 Scheduled Reports and Enterprise Tenants 25 Selecting Tenants to Receive Scheduled Reports 25 Working with Workspaces and Enterprise Tenants 25 Selecting the Tenant Data to View 25 Filtering Events in Tenants 27 Creating Event Filter Groups 28 Creating Event Filters 28 Exporting Event Filter Groups 29 Editing Event Filter Groups 29 Deleting Event Filter Groups 29 Editing Event Filters 29 Copying Event Filters 30 Exporting Event Filters 30 Importing Event Filters 31 Moving Event Filters Between Groups 31 Deleting Event Filters 31 Managing Archived Agent Data 32 Archive Data Storage 33 About Archived Data Retention 33 Data Retention and Deletion of Bundles 33 Configuring the Tenant Data Archive 34 Enabling Cloud-Based Data Archiving 34 To Enable Cloud-Based Data Archiving For Your Tenant 35 To Disable DGMC Bundle Archiving 36 About the Tenants Data Table 36 Accessing the Tenants Data Table 37 Exporting the Tenant List 37 Reports 39 Event Detection Options 40 ARC Detection Rules 41 About Watchlists 41 Creating Event Filters 43 Administrator's Guide [www.fortra.com](www.fortra.com) page: iii Copying Event Filters 44 Importing Event Filters 44 Deleting Event Filters 44 Creating Event Filter Groups 45 Moving Event Filters Between Groups 45 Exporting Event Filter Groups 45 Deleting Event Filter Groups 46 Content Packs and Content 47 Managing Users in ARC 56 Adding User Roles 56 Admin Page Permissions 57 ARC Permissions 57 About Privilege Levels 61 Assigning ARC Users to Roles 62 Understanding the ARC Permissions Hierarchy 63 ARC Content Access 64 Creating ARC Users for the System Tenant 66 Creating ARC Users for Other Tenants 67 Modifying Tenant User Roles Synchronized From the DGMC 67 Creating New Roles 68 Creating New Roles for the System Tenant 68 Assign Users to Groups 71 Creating User Roles 72 Custom Roles 72 Permissions for Features and Functions 73 General DG Permissions and Functions 76 System 81 Configuring Email Notifications 82 DG Threat Intelligence Service 82 Configuring Tenants to use VirusTotal 82 To Configure Tenants for VirusTotal Access 82 Fortra Threat Brain Integration 83 Setting up Fortra Threat Brain at the System Tenant Level 83 Fortra Threat Brain Authentication 83 Configuring Tenants to use Fortra Threat Brain 84 To Configure Fortra Threat Brain 84 Integrating UserPilot with ARC 85 Access and Setup 85 Connecting ARC and Application Codes 86 Application Codes and Targeting Content Across Multiple Products 86

FAQs

What is a tenant in ARC, and why is tenant data kept separate?

A tenant corresponds to a Digital Guardian installation. ARC keeps each tenant’s data separate and secure so tenant boundaries are not crossed.

What can you do from the System Tenant versus a Normal Tenant?

The System Tenant (tenant 0) provides default access and allows actions such as investigating multiple tenants, creating/removing any tenant, and creating users and scheduled reports. A Normal Tenant (tenant 1+) focuses on managing a single tenant’s investigation, synchronized user role modifications, detection rules, scheduled reporting, and event filtering.

How do event filters and event filter groups help manage incoming events?

Event filter groups and event filters let administrators define how events are selected and handled before events enter the ARC system. The guide outlines creating, exporting, importing, moving, editing, and deleting both groups and filters.

Oct 24, 2026

Upload by Stanford