Logs and reporting

Help | V-Series Appliance | Version 8.0.x

V-Series appliances keep detailed logs of activity on the system. These logs are designed to assist you and Websense Technical Support when there is unexpected behavior. For more information about V-Series logs, see Logs.

Modules on the V-Series appliance by default generate detailed reporting records (usually called log records) of module usage and actions. This requires installing a Windows-only reporting component (Log Server for TRITON AP-WEB and Email Log Server for TRITON AP-EMAIL) on another machine.

To add either Log Server component to your deployment:

Download the Websense TRITON Setup application, available from www.mywebsense.com.

Install Log Server on a Windows server with access to:

The Microsoft SQL Server instance that will host the Log Database

The appliance, so that it can retrieve data from web or email components to create log records

Management reports based on log records can be generated using the reporting tools included in the Web and Email modules of the TRITON Manager

Web and Email module reports

When you launch the Web or Email modules of the TRITON Manager, a dashboard shows the operating status of Websense software.

In the Web module, the Threats dashboard provides information about advanced malware threat detection. Additional Risks, Usage, and System dashboards provide additional security tools, Internet activity monitoring, and system status information.

In the Email module, the Today page shows current status, and can display charts of web or email security activities in the network since midnight. The History page shows charts of web or email security activities in the network for up to 30 days.

Presentation reports provide customizable graphical and tabular reports of client Internet activity or message security activity.

The Web module offers investigative reports that allow you to drill-down into your data to find the information of most interest to your organization.

The Web module also offers Real-Time Monitor. Real-Time Monitor allows you to see what traffic is being analyzed by the Filtering Service instances associated with a Policy Server, and what action is applied to each request.