10.3 Viewing operation logs

You can view a list of user operation logs stored on a management server. Tracing the history of file transfers or identifying computers on which suspicious operations were performed allows you to identify information leakage at an early stage, and to take measures against it.

Tip: To obtain operation logs, specify settings for operation logs in setup. In addition, the operation log policy must be enabled in advance.

To view operation logs:

Display the Security module.
In the menu area, select Operation Logs and then Operation Log List.

Operation logs are displayed in the information area. Clicking [Figure] on the scroll bar scrolls the displayed operation logs by day, and clicking on the scroll bar scrolls the logs by month. The order in which operation logs that have the same operation date and time are displayed might change on each window page.

At the top of the view, a time chart is displayed, and the dates for which operation logs are displayed are in a frame. If you click the button for a date, operation logs for that date are displayed at the top. Note that you can click only the dates for which Online or Restore is displayed when you move the mouse over them. If the time chart is too wide to be fully displayed, click [Figure] or to scroll the chart. For the dates for which Archive is displayed when you move the mouse over them, you can import operation logs if the logs have been backed up.

If you specify operations that involve file transfers to be detected as suspicious operations in the security policy, when a suspicious file transfer is detected in an operation log, [Figure] is displayed in the Suspicious Operations field. To search operation logs for suspicious file transfer operations in the operation log list, use this symbol to filter the list to make the search easier.

Tip: In addition, if operation logs are specified in setup to be automatically stored, old operation logs are backed up. Operation logs that are more than one month old are removed from the database. Therefore, if you want to view past operation logs, import the backed up operation logs.

Important note: If operation logs are not stored on a management server, the Operation Log view is not displayed.

Tip: You can export operation logs by using the ioutils exportoplog command. We recommend that you export operation logs if you want to use them in other materials.

Tip

You can view the operation logs for a device selected in the Device module.

To view the operation logs of the device, in the Device module, select Device information, and in the Device list view, from Action select To Operation Logs. The view then switches to the Security module, from which you can view the operation logs. If both operation logs and distributed operation logs have been obtained, the view for checking the distributed operation logs can be displayed by following the steps described above.

Related Topics:

To Page Top