Transaction Viewer display options

Transaction Viewer display options allow you to:

  • Enable Detail view after highlighting a record in the report. Alternatively, double- click a record in the report.
    • A Transaction Details section is added at the bottom of the page.
    • Select General to view details such as user and group information, policy information, and category information.

      If a user is a member of multiple groups, the first 10 groups are listed. Click View all groups to display the full list.

    • Select Request Details to view details such as source and destination IP addresses, full URL, or port and protocol information.
    • Select Cloud Apps to view information about a cloud app that was requested.

      This tab will not display for transactions that do not include cloud app data.

      Note that "none" will display on this tab if the Monitor Only cloud apps filter was applied to the request.

    • Select Threat Details to view details about any threat that may be associated with the request. The tab displays only if there is threat related data in the selected transaction.

      By default, 30 days of threat data is maintained in the Log Database. This value can be configured on the Web > Settings > Reporting > Dashboard page of Forcepoint Security Manager.

      Access to this tab is based on the delegated administrator role and the Reporting Permissions assigned to it. See Delegated Administration and Reporting.

    • Select Forensics Data to view information about files associated with threat activity and attempts to access them. The tab displays only if forensics data is available in the selected transaction.

      Forensic data is available only if Store forensic data about Threat incidents for further investigation is selected on the Web > Settings > Reporting > Dashboard page of Forcepoint Security Manager. The type of data collected and length of time to store the data is also configured on that page.

      When available, forensics data is included in the output when one of the export options is used.

      Access to this tab is based on the delegated administrator role and the Reporting Permissions assigned to it. See Delegated Administration and Reporting.

    • Select Advanced to view request information such as total bandwidth used and browser and operating system information.

    Disable Detail View to return to the table format.

  • Select the number of rows for each report.
  • Page through longer reports.