Viewing Forcepoint DLP Logs

Administrator Help | Forcepoint DLP | Version 8.5.x

Forcepoint DLP traffic and events are recorded in a number of logs that can be viewed from the Data Security module of the Forcepoint Security Manager. Use the logs to assess system performance, track events, and audit administrator actions in the Security Manager.

To access the logs, go to Main > Logs, then select an entry in the menu:

The Forcepoint DLP traffic log

The Forcepoint DLP system log

The Forcepoint DLP audit log

Filtering log data

Filter log data to see only entries that meet specific criteria. For example, filter the audit log to review the actions of a particular administrator on a certain date.

Data on the log pages can be sorted, grouped, and filtered by column name. For example, the traffic log can be sorted by incidents, action taken, or event time.

To sort or filter the table items on a status or log screen, click the down arrow by any column name and choose an option:


Field	Description
Sort Ascending	Select this option to sort the table by the active column in ascending alphabetical order.
Sort Descending	Select this option to sort the table by the active column in descending alphabetical order.
Filter by (column)	Select this option to filter the data in the table by the type of information in the active column, such as by description or task name.
Clear filter	Select this option to clear the filter and display all tasks.

To view the current filters in use, click the information ("i") icon next to Column Filtering Activated.

When a filter is applied to a column, a funnel icon

appears next to the column name.

To clear the filter from a column, click the down arrow by any column name and select Clear filter. The toolbar at the top of the content pane also offers a Filter button that can be used to clear a single filter or all filters.

If there are too many items to fit on the screen, use the Next, Previous, First, and Last buttons to browse the list.

Printing and exporting logs

Each log offers one or more options for printing or exporting the log data. The icons used to print or export the data appear on the right-hand side of the toolbar at the top of the content pane. Which option or options appear depends on which log is selected.

Mouse over the icons to see a tooltip explaining its function.

To print logs, click Print Preview.

To export logs to a PDF or CSV file, click Export to PDF or Export to CSV. The CSV contains all the rows in the main table, without paging. If the list is filtered, only the filtered records are exported.