Forcepoint™ Security Management Center Service Online Documentation

Home
Monitoring
Viewing and Exporting Logged Data
You can view logs through the log browsing view. You can view data from all types of Engines, and from third-party elements that are configured to send data to the SMCaaS Application.
Exporting data from the Logs view
You can export log entries in various ways and formats.

Preface
This guide provides the information you need to work with your Forcepoint product.
Introduction to SMC as a Service
The SMC as a Service provides centralized access for configuring, managing, logging, and monitoring NGFWs that secure network connectivity and control business operations.
Getting Started
Routing
Policy Creation and Administration
Monitoring
- Monitoring SMCaaS Application elements
  You can monitor Engines and view system summaries in the SMCaaS Application.
- Application Health Monitoring
  The Application Health Monitoring dashboard lets administrators monitor network and application layers connection quality.
- Viewing and Exporting Logged Data
  You can view logs through the log browsing view. You can view data from all types of Engines, and from third-party elements that are configured to send data to the SMCaaS Application.
  - Getting started with the Logs view
    The Logs view displays all logs for the SMCaaS Application.
  - Browsing log data
    You can browse, filter, and search for log data in the Logs view.
  - Changing how log entries are displayed
    There are various ways in which you can customize how entries in the Log view are displayed.
  - Exporting data from the Logs view
    You can export log entries in various ways and formats.
    - Copy log entries in CSV format
      Log, alert, and audit data can be copied directly from the Logs view, then pasted in comma-separated values (CSV) format.
    - Export log entries
      Log, alert, and audit data can be exported directly from the Logs view. Use the export command for large numbers of entries.
    - Export IPS traffic recordings
      You can set IPS Inspection rules to record network traffic as a logging option in both the Exceptions and the Rules tree.
  - Export data in PDF format
    You can export lists of elements, logged data, diagrams and dashboards in PDF format.
  - Create rules from log entries
    You can use log entry details to generate new rules.
  - Forwarding log data to an Elasticsearch cluster
    Elasticsearch is an open-source search Engine that runs on an external Elasticsearch server cluster. You can forward log data from Log Servers and Management Servers to an Elasticsearch cluster to improve the performance of browsing and searching for log entries, report generation, and other log-related features.
- Reports
  Reports are summaries of logs and statistics that allow you to combine large amounts of data into an easily viewable form.
- Filtering Data
  Filters allow you to select data based on values that it contains. Most frequently, you use filters when viewing logs, but filters can also be used for other tasks, such as exporting logs and selecting data for reports.
VPN

Exporting data from the Logs view

You can export log entries in various ways and formats.

Note: The log exports are limited to a maximum of 1 million records.

Copy log entries in CSV format
Log, alert, and audit data can be copied directly from the Logs view, then pasted in comma-separated values (CSV) format.
Export log entries
Log, alert, and audit data can be exported directly from the Logs view. Use the export command for large numbers of entries.
Export IPS traffic recordings
You can set IPS Inspection rules to record network traffic as a logging option in both the Exceptions and the Rules tree.

Copyright © 2026 Forcepoint LLC