Component	Description
Log Server	Logs Internet request data, including: The request source The category or protocol associated with the request Whether the request was permitted or blocked Whether keyword blocking, file type blocking, quota allocations, bandwidth levels, or password protection were applied Beginning with 7.8.4, support IPv6 addresses. With Network Agent and some integration products, Log Server also stores information about the amount of bandwidth used. Log Server is a Windows-only component that must be installed to enable most Web Security reporting features. After installing Log Server, configure Filtering Service to pass logging data to the correct location (see Configuring how requests are logged).
Log Database	Stores Internet request data collected by Log Server for use by Websense reporting tools.
Real-Time Monitor	Displays current Internet activity, including: Request source (user name or IP address) URL (full or domain only) Category (Master Database, custom URL, or dynamic, based on Content Gateway scanning) Whether the request was permitted or blocked Time of the request Real-Time Monitor is made up of 3 services: Websense RTM Client Websense RTM Server Websense RTM Database See Real-Time Monitor.
Multiplexer	When enabled, passes logging data from Filtering Service to: A specified SIEM solution Log Server Used only when Websense software is integrated with a supported SIEM product. To enable SIEM integration, install one Multiplexer instance per Policy Server.