The following two functions are available in the Operation Log List window:

• Searching operation log data
• Tracing user operations

The following subsections explain these functions.

(a) Searching operation log data

You can use the following search functions in the Operation Log List window:

• Searching the operation log data acquired during a specific period
• Searching the operation log data by host name or IP address
• Searching the operation log data by type

You can also select a search pattern provided by JP1/Software Distribution and set the operation log search conditions in batch mode.

Using the above search functions, you can manage the following operation log data from the Operation Log List window:

• Program start log
  Log data on starting, stopping, and suppressing the programs being used
  
• Window title change log
  Titles of viewed Web sites
  
• File operation log
  Log data on creating, opening, deleting, copying, changing the name of, moving, and printing of folders and files
  
• PC startup log
  Log data related to the PC: starting, terminating, logging on, and logging off.
  
• Web access log
  Log data on Microsoft Internet Explorer accesses.
  
• External media log
  Log data on connecting or disconnecting a USB storage device, internal CD/DVD drive, etc.
  Log data on operations that permit or suppress connection to a USB storage device, internal CD/DVD drive, etc.
  

(b) Tracing user operations

If you click the file name displayed in an operation log entry in the Operation Log List window, the File Operation Trace window opens.

In the File Operation Trace window, you can trace the user operations performed on the selected file based on its associated operation log data. If there is operation log data whose date and time is more recent than the operation log data displayed for the selected file, you can also trace subsequent operations on that file.

If you discover from operation log data that a confidential file was copied to a different location, you can determine the details of the unauthorized operation by tracing back to the user who copied the file as well as the route traversed by the copied file.

The following figure shows the File Operation Trace window.

Figure 2-32 File Operation Trace window

For details about how to perform operations in the File Operation Trace window, see 6.6.4 Tracing operation logs in the manual Administrator's Guide Volume 1.