Statistics on Component Operation |
You can review the statistics on operation of the main Dr.Web components. To open the statistics on important events of protection component operation 1.Open Dr.Web menu 2.In the open window, select Statistics tab. 3.The Statistics page opens where reports for the following groups are available: Figure 95. Statistics on component operation 4.Select a group to review the reports. In this window, the detailed information on all the program operation events is collected. ![]() Figure 96. Detailed report window The following information is logged in the report: •Date—date and time of an event. •Component—the component or module that caused the event. •Event—a brief description of the event. By default, all events for all the time are displayed. The management elements You can use additional filters to select certain events. In the Office Control group, you can view the statistics of blocked URLs for every user account. ![]() Figure 97. The Office control statistics window The following information is logged in the report: •Date—date and time of blocking. •Blocked resource—the link to the blocked resource. •Reason for blocking—the category or exclusion list that the blocked resource belongs to. By default, all events for all the time are displayed. The management elements You can use additional filters to select certain events.
On the Threats tile on the main statistics window, the information on the total number of threats for a certain period of time is shown. When choosing this option, the Detailed Report window with predefined filters for all the threats will open. ![]() Figure 98. Statistics on threats window The following information is logged in the report: •Date—date and time of the threat detection. •Component—the component that has detected the threat. •Event—a brief description of the event. By default, all events for all the time are displayed. The management elements You can use additional filters to select certain events. You can view the report of network activity if Dr.Web Firewall is installed on your computer. To view information on active applications, an application log, and a packet filter log, select necessary object from the drop-down list. ![]() Figure 99. Statistics on network activity window The report shows the following information for every active application: •Direction •Operation protocol •Local address •Remote address •Size of sent data packet •Size of received data packet You can block one of the current connections or allow previously blocked connection. For this, select a required connection and right-click. Only one option is available, depending on the connection status. The application log shows the following information: •Application start time •Application name •Application processing rule name •Direction •Action •Endpoint To enable the application logging, go to Firewall page and then open Add or Edit application rule window. For the detailed information, refer to the Application rule settings section. Packet Filter Log shows the following information: •Start time of data packet processing •Direction •Processing rule name •Interface •Packet data To enable packet filter logging, go to Firewall page and then open Add or Edit packet filter rule window. For the detailed information, refer to the Rule sets for filtering packets. When clicking at one of the columns, the events are arranged in ascending or descending order. Filters To view a list of only those events that correspond to specific parameters, use filters. All the reports have preset filters that are available by clicking
1.To filter by a specific parameter, click on the heading of the required column: •Filter by date. You can select one of the predefined periods specified in the left part of the window, or specify your own. To set the required period, select the start date and the end date of the period in the calendar, or specify the dates in the Period field. Filtering by date is also available in ascending or descending order. ![]() Figure 100. Data sorting •Filter by component. You can check the components the information on which will be included in the report, or arrange the entries by ascending or descending order. •Filter by event. You can check the events to be shown in the report, or arrange the entries by ascending or descending order. For Office control statistics, in addition to the date filter, the following options are available: •Filter by blocked resource. You can sort entries in ascending or descending order only. •Filter by reason for blocking. You can check the reasons for blocking to be shown in the report, or arrange the entries by ascending or descending order. 2.Once the filter parameters selected, click Apply. Selected items will be displayed above the table. 3.To save the filter, click 4.In the open window, enter a name for the new filter. Click Save. |