See the usage history of a device using Cloud Reporting – Smoothwall Help Centre

You can use the Device Report to investigate past browsing history on a specific device. Using this data, you can:

Identify who was using the device at a specific time based on their username.
Review activity for devices with shared sign-in credentials. For this scenario, you’ll need to cross-reference the data with seating charts or ask a teacher or staff member who was using the device at the time.

You can use the Real Time Filtering Log Viewer to see the current device activity.

Before you begin

You'll need to know the hostname or IP address of the device you want to report on.

Depending on your organisation and network, you may be able to find these in Intune, Google Workspace, MDM, DHCP, DNS, Active Directory etc.

To be able to accurately separate data for different devices, ensure that each device has a unique hostname.
Device IP addresses may change depending on your organisation's configuration, so consider this when reviewing the data.

Enter a Report Name.
If you have a multi-tenant setup, you’ll see a Tenant field:
- If you are an Administrator, select one or more Tenant checkboxes or the All Tenants option.
- If you have Reporting access, the tenant you are linked with will be selected.
Tip

Check the Multi-tenant Report requirements if you can’t see the Tenant field.
You can choose to include Log Level 1 and 2 data in reports and downloads by setting the Include advanced log details toggle to the On position.

The Device field requires you to enter at least three characters, but you need to enter the full device name.

Select a start and an end Date and Time.
Note
- You can select a date range of up to 31 days.
- You can select dates from the past 90 days. Only data from when you started using Smoothwall will show in your reports.
Select Run Report. You’ll be taken back to the Reports page, where you’ll see your report is generating with the status of In Progress.
You’ll receive an email letting you know when the report is ready. Select View report now.

To access the report, you can:
- Refresh your page if you are waiting for it to move from In Progress to Ready.
- Select the View report now button in the email.
- Sign in to the Cloud Portal and select Reporting.
Select between the Filter Reports or Multi Tenant Filter Reports tab if you have access to Multi Tenant reports.
If you selected the Filter Reports tab and have a multi-tenant environment, select the Tenant the report was generated for at the top right of the page.
Select the report to view the Report Overview and Report Data tabs, export and share the data or find out why you might not be able to view a report.

The Report Overview tab provides high-level summary graphs and charts of:

Top Users: A summary of how many lines of data there are for each device user. You can use this to see if a specific device is being utilised, then drill down into the activities it is being used for.
Top Domains Visited: The top 10 domains visited, including the Level.
Search Terms: Words or phrases users have searched for, including the Level, frequency and whether access was allowed or blocked.
Safeguarding Alerts: The number of breaches with each Safeguarding theme, including the Severity.

Tip

Select a segment in the Top User chart or a bar in the Top Domains Visited chart to see filtered Report Data.

The Report Data tab gives you line-by-line full browsing activity.

Use the Column Selector to customise the columns shown in the table. You can’t remove the Username, Url or Action columns.
Use the magnifying glass to search within a column. Searching for a Top Level Domain will show results from subdomains, but entering a subdomain won’t show results for the Top Level Domain.
You can see the timestamp for each access request. The most recent events are shown at the top.