10.4 Viewing distributed operation logs

You can search the details of user operation logs stored on a site server and view them in a list. Tracing the history of file transfers or identifying computers on which suspicious operations were performed allows you to identify information leakage at an early stage, and to take measures against it.

To view distributed operation logs:

Display the Security module.
In the menu area, select Operation Logs (Distributed operation log) and then Extraction Target List.
In the information area, click the button.
In the displayed dialog box, select filter conditions for the operation logs that you want to view, and then click OK.

In the information area, a list of the following is displayed: the date, the total number of source devices, and the number of operation logs.

Tip

You can save filter conditions by clicking the Save As button.
From the list in the information area, click the total number of source devices for which you want to view details.
- If the total number of source devices is 10,000 or less:
  
  In the information area, a list of the following is displayed: the number of site servers for source devices and management sources, as well as the number of operation logs.
- If the total number of source devices exceeds 10,000:
  
  In the information area, a list of the following is displayed: the number of site servers for management sources, the number of source devices, and the number of operation logs.
  
  From the list, click the number of source devices for which you want to view details.
  
  In the information area, a list of the following is displayed: the number of site servers for source devices and management sources, as well as the number of operation logs.
From the list in the information area, click the source devices for which you want to view details.

Operation logs for each selected source are extracted and displayed.

To change the filter conditions for Extraction Target List, select the Extraction Target List tab, click the [Figure] button, and then perform the procedure beginning from step 4.

Important note: If distributed operation logs have not been obtained, the Operation Log (distributed operation log) view is not displayed.

Tip: Save the filter conditions for each list displayed in Extraction Target List and the operation log list displayed in Extraction Results. Because the specifiable filter conditions differ among the lists, if you attempt to apply filter conditions for one list to another, some conditions might not be applied. In addition, if filter conditions are edited or saved in another list, the originally specified conditions might be deleted.

Tip

You can view the operation logs of a device selected in the Device module.

To view the operation logs of the device, in the Device module, select Device information, and in the Device list view, from Action select To Operation Logs. The view then switches to the Security module, from which you can view the operation logs.

Related Topics:

To Page Top