When creating an audit report on a local user, it will usually show up blank. This KB describes what is needed to get information to show up in the report.
Applies to: DirectAudit version3.2.1 and higher.
Problem: Launching Centrify Audit Analyzer and going to Expand Reports, Expand User Activity Report and selecting the report name that was created for the local user. Then right click on the report and select "show report", the report that comes up has a title, data retrieved, but no other information.
Issue: The reporting mechanism is unable to determine where to look for the local user since it doesn't see it in Active Directory so it produces a blank report.
Resolution: In order to tell the report where to look for the user, we must tell it on what machine to look for the report with the format username@machinename. For example, to pull the report on the user root on a machine named Linux1, we would specify the username as root@linux1.
This should result in a report with the audited information for root on Linux1.