Web logs

The Web logs contain all web browsing events generated from users using the Forcepoint ONE Mobile and Cloud SWG while accessing websites. Reports are generated every 5 minutes with new log data. Log data is retained for 30 days.

To access the page, navigate to Analyze > Logs > Web.

Note: If your mobile network assigns the device an IPv6 address, the address displayed on the logs will be a default dummy address.

Admins can identify a mobile device from the Web logs by searching the device's Registration ID. Clicking on a specific event log line opens the Web Transaction Details page, which provides detailed information about the event. The Device GUID field will display the Registration ID.

Example: If the Device GUID is DE241C44-283B-18EE-AB6C-EFE6F802C92F and the Registration ID is 77502, navigate to the Web Transaction Details page and search for Device GUID = 77502, not DE241C44-283B-18EE-AB6C-EFE6F802C92F.

To learn more about web logs, see the Reviewing Web logs page from Forcepoint ONE SSE Deployment Guide.