Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Administering Websense Databases > Understanding the reporting databases
Understanding the reporting databases
Administering Websense Databases | Web, Data, and Email Solutions | v8.0.x, v8.1.x
Each TRITON reporting database stores the logging data collected by a specific TRITON solution: TRITON AP-WEB, Web Filter & Security, TRITON AP-DATA, or TRITON AP-EMAIL.
*
Web Log Database stores Internet request data collected by Log Server, such as the source, destination, time, category, risk class, action (also called disposition), bytes sent and received, and so on for use by Web reporting tools.
Log Server receives information about Internet activity from Filtering Service and initially stores it locally:
Whenever it is able, Log Server forwards the cache files to the Log Database, where the ETL job processes them into log records in a database partition:
 
An end user who uses the Filtering Service has no direct or indirect influence over the database. Thus, although the log entry is stored in the MSSQL database, the user did not direct its storage and cannot retrieve it.
The only interface to the database itself is from the Log Server, the Reporting services, and the Manager. Filtering Service and Websense Content Gateway do not access the database, but instead send information via the Log Server.
*
Email Log Database stores records of email traffic and the associated analysis and disposition of that traffic. TRITON AP-EMAIL reporting uses this information to generate dashboard status charts and email activity reports showing, for example, the size and volume of messages processed, message analysis results, and email source and destination.
Log and quarantine data are recorded as follows:
 
*
Data Incident and Configuration Database stores information about email, Web, and other traffic that resulted in data loss prevention (DLP) policy breaches, such as the source, destination, time, status, and severity of each breach. It also stores TRITON AP-DATA policy configuration and system settings.
TRITON reporting databases are all hosted by Microsoft SQL Server. They may be hosted by the same installation and instance, or by different installations or instances.
Although Microsoft SQL 2008 R2 Express (SQL Server Express) is packaged with Websense software, enterprises with high transaction volume should purchase Microsoft SQL Server Standard or Enterprise. (See Can I use SQL Server 2008 R2 Express? for guidance.)
When you install Websense software, you can either install SQL Server Express on the TRITON management server or connect to an existing SQL Server instance on another machine.
Related topics:
*
*
*
*
*
*
SQL Server Express on the TRITON management server
For smaller deployments (up to 500 users), TRITON reporting databases can be installed on the TRITON management server.
The TRITON installer installs SQL Server 2008 R2 Express (32-bit) to host reporting databases when you select Install SQL Server Express on this machine during installation. SQL Server 2008 R2 Express is the only version of SQL Server that may reside on the TRITON management server.
If you are upgrading from a previous version of Web protection solutions and have a different version of SQL Server installed on the TRITON management server machine, move your reporting database to a different machine for improved performance and a better overall product experience.
SQL Server Express can run on the following Windows platforms. Note that Windows Server 2008 R2 and later support all TRITON products.
SQL Server on another machine
In medium and larger deployments (over 500 users), the best practice is to host TRITON reporting databases on a Standard or Enterprise installation of Microsoft SQL Server. SQL Server typically resides on a dedicated machine. It may host databases for third-party applications, in addition to the Websense databases.
If SQL Server resides on a dedicated machine and there are multiple SQL instances installed, SQL Server Browser must be running.
When installing Websense software, you are prompted to provide the IP address or hostname of the SQL Server machine. You may also specify:
*
*
*
The following databases are supported.
Clustering is supported for all supported versions of SQL Server noted in the table above. See Can Websense reporting databases be hosted in a SQL Server cluster?.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Administering Websense Databases > Understanding the reporting databases
Copyright 2016 Forcepoint LLC. All rights reserved.