Understanding Usage graphs in Proxy logs

The Application and File Activity graphs show you a breakdown of activity based on the selected view (example: Downloads vs. Uploads).

This helps to get a visual sense of how applications and files are being used in the enterprise. The time period displayed corresponds to the time period selected in the Display Filter. The time period granularity automatically displays in weeks, days, or hours depending on how many results are yielded by the current Display filter.



From any graph view you can:

  1. Click on the legend to change the view to a single app or cmd/ctrl click multiple apps to compare activity. The Y axis will auto-adjust based on your clicks so you get a better view of interesting data.
  2. Mouse over data points to see a pop-up showing exact dates and values for a particular point in time.

Application Activity Graph



The Application Activity graph can display the following:

  1. Unique Users: Number of unique users accessing each application.
  2. Downloads: Number of files downloaded.
  3. Usage: Total number of requests through the proxy.
  4. Uploads: Number of files uploaded.
Note:
Office 365 has 4 apps that are tracked separately:
  1. Yammer - Requests made only to Yammer.
  2. OneDrive - Requests made only to One Drive.
  3. Sharepoint - Requests made only to Sharepoint.
  4. Office 365 - Requests made to any other Office 365 applications excluding the applications above.
GSuite has 2 apps that are tracked separately:
  1. Google Drive: Requests made only to Google Drive.
  2. Google Apps: Requests made to any Google application excluding requests from Google Drive.

Watermark, DLP and DRM Activity Graph

The Watermark, DLP and DRM Activity graph shows specific activity that triggered a policy. You can view by:



  1. Downloads: Number of downloads of each file type.
  2. Uploads: Number of uploads of each file type.
  3. File Views: Number of callback events registered in Forcepoint ONE SSE by file type.