What are attributes?
Report attributes are data elements that are included in log records and stored n the Log Database.
The following table lists the attributes and metrics available for selection for Report Center reports.
| Name | Description | Filter Options |
|---|---|---|
| ATTRIBUTES | ||
| General | ||
| Action | The action taken as a result of a request. | Text |
| Category | Category to which a request is assigned. This may be a category from the Forcepoint URL Database or a custom category. | Text |
| Group | Name of the group to which the requester belongs. | Text |
| User Access ** | With the Hybrid Module, this value indicates whether the user was off-site or on-site. | Check boxes |
| Parent Category |
Parent category, if applicable, of the category assigned to the request. Selecting a Parent Category will include its subcategories. |
Text |
| Policy | Policy applied to a request. | Text |
| Result | Whether the request was permitted or blocked. | Check boxes |
| Risk Class |
Risk class associated with the category assigned to a request. If the category is in multiple risk classes, one request may be associated with multiple risk classes. |
Check boxes |
| User | User making a request. | Text |
| URL | ||
| Protocol | Protocol used to make a request. | Text |
| URL | URL of a requested site. | Text |
| Full URL ** |
Domain name and path for the requested site. If you are not logging full URLs, this field will show “not logged”. |
Text |
| Cloud Apps | ||
| Cloud App | Cloud application requested. | Text |
| Cloud App Category | Category to which a requested cloud application is assigned. | Check boxes |
| Cloud App Risk Level | Risk level associated with a requested cloud application. | Check boxes |
| IP Address | ||
| Destination IP | IP address of a requested site. | Text |
| Port | TCP/IP port over which a request was made. | Text |
| Source IP | IP address of the machine from which a request was made. | Text |
| Source Server IP |
IP address of the machine sending requests to Filtering Service. In standalone deployments, this is the Network Agent IP address. In integrated deployments, this is the gateway, firewall, or cache IP address. With the Hybrid Module, this option can be used to identify requests filtered by the hybrid service from both on-site (filtered location) and off-site users. |
Text |
| Time | ||
| Date | Date a request was made. | Selected |
| Day of Week | Day of the week a request was made. | Check boxes |
| Month | Month a request mas made. | Check boxes |
| Time ** | Time of day a request was made. | Selected |
| User Agent | ||
| Client App | Name of the client app with which a request was made. | |
| Client App Version | Version number of the client app from which a request was made. | |
| OS | Operating system installed on the machine used to make a request. | |
| OS Version | Version of the operating system on the machine used to make a request. | |
| User Agent | The HTTP header that web browsers and other web applications use to identify themselves and their capabilities. | |
| METRICS | ||
| Bandwidth | Total bandwidth (bytes received plus bytes sent) used for a request. | |
| Bytes Received | Bytes received in response to a request. | |
| Bytes Sent | Bytes sent by a request. | |
| Browse Time | Estimated amount of time spent viewing a requested site. | |
| Requests | Number of requests made to a site. | |
** Available in the Transaction Viewer only