CASB Logs Overview

Tasks You Can Perform

You can perform the following tasks from this page:

• View a graphical representation of traffic logs for a specified time range in the Time Range widget.

• The X-axis represents the defined time while the Y-axis represents the number of traffic logs.

• Use the slider to decrease or increase the time range of the traffic logs. You can also select from predefined time ranges such as 5m, 10m, 20m, 30m, 1h, 2h, 4h, 8h, 16h, 24h, or Custom.

• If you select Custom, you must specify the dates and time range in MM/DD/YYYY and HH:MM:SS 24-hour or AM/PM formats to display the traffic logs for a specific period.

• View information related to traffic logs. See Table 1.

• View similar traffic logs. To do this, select a traffic log and click Show exact match.

• Group the traffic logs based on the options available in the Group by list.

  For example, you can group the traffic logs that are based on the destination country and the destination IP address.

• View the complete details of logs. To do this, select the event row and then click More > Detail.

• Filter on cell data. To do this, select an event row and then click More > Filter on cell data.

  The search filter string is displayed in the advanced search field. The data in the corresponding column is filtered based on the filter string. Click X to clear the advanced search field.

• Exclude cell data. To do this, select an event row and then click More > Exclude cell data.

  The search filter string is displayed in the advanced search field. The data in the respective column is excluded based on the filter condition. Click X to clear the advanced search field.

• Click Export Logs to download the event logs. The Export Logs to ZIP window opens. The data is downloaded in CSV format within a ZIP folder.

• Add filters. To do this:

  1. Click the filter icon and then select Show advanced filter.

     The Add Criteria window opens.

  2. Select the values for Field and Condition from the list.

  3. Enter the value for the selected field and conditions.

  4. Click Add.

  5. Click Save.

     The Save Filter page opens.

  6. Enter a filter name and description and then click OK.

     The filter is saved.

     Note:

     Click X to clear the saved filters.

• Hide filters. To do this, click the filter icon and then select Hide advanced filter.

• View or load all the default or saved filters. To do this:

  1. Click the filter icon and then select All Saved Filters.

     The View/Load Filters page opens.

  2. Select a saved filter and click OK to load the data based on filter conditions.

  3. Select a saved filter and click the delete icon on the upper-right corner of the page to delete it.

• Show or hide the columns that are displayed on the page. To do this, click the three vertical dots on the upper-right corner of the page and then select Hide/Show Columns. Select the columns that you want to display in the grid.

• Reset CASB profile monitoring preferences. To do this, click the three vertical dots on the upper-right corner of the page and then select Reset Preference.

Field Descriptions

The following table provides information related to action and activity based application logs.