Skip to main content

Review and export search term logs

Updated

Use the Reports > Realtime or Logs > Search terms page to monitor search activity on devices filtered by the On-Premise Appliance.

  • Lists the search terms and phrases users have entered into Search Engines.
  • Displays a real-time log of what users are searching for right now.
  • Displays a graph showing the number of hits to domains and how many of those were blocked.

See current data

To view current log data or pause it, select Realtime.

See past data

  1. Select a particular time:

      Note

    Your Datastore settings determine how much past data is available.

    • Use the Earlier and Later buttons to move forward or backwards one page of results.
    • Select a date and time.
    • Select a time from the graph.
  2. Select Advanced to choose which columns to show. By default, every column except Policy is shown, and you can’t remove the Time column.
    • Username
    • Source IP: Originating Source IP address or subnet range.
    • Search domain: The Search Engine used.
    • Search phrase: A keyword or phrase to search for in the logs.
    • Category
    • Policy: The Category or Category Group selected in the What step of the Web Filter Policy that applies to the request.

        Tip

      Select the field to go to the Policy wizard to edit the Web Filter Policy.

  3. Filter the logs if needed:
    • Enter text into the fields below the column headers for Username, Source IP, Search domain, Search phrase or Category.
    • Select the down arrow and the Exact match checkbox for Source IP to only search for the IP specified.
    • Select the down arrow and the Exclude search suggestions checkbox for Search phrase to remove predictive search suggestions from the log results.

Export the data

Select Export to download the logs in comma-separated (CSV) format.