This article applies to organisations with a Cloud setup, and those with a 'Hybrid' setup (both On-Premise Appliance and Cloud).
You can use the Device Report to investigate past browsing history on a specific device. Using this data, you can:
- Identify who was using the device at a specific time based on their username.
- Review activity for devices with shared sign-in credentials. For this scenario, you’ll need to cross-reference the data with seating charts or ask a teacher or staff member who was using the device at the time.
You can use the Real Time Filtering Log Viewer to see the current device activity.
Before you begin
You'll need to know the hostname or IP address of the device you want to report on.
Depending on your organisation and network, you may be able to find these in Intune, Google Workspace, MDM, DHCP, DNS, Active Directory etc.
- To be able to accurately separate data for different devices, ensure that each device has a unique hostname.
- Device IP addresses may change depending on your organisation's configuration, so consider this when reviewing the data.
Run a Device Report
- Sign in to the Cloud Portal and go to Reports > New Filter Report.
- Select the Device Report tab.
- Enter a Report Name.
- If you are part of a multi-tenant environment, select a Tenant to report on.
- The Device field requires you to enter at least three characters, but you need to enter the full device name.
- Select a start and an end Date and Time.
Note
- You can select a date range of up to 31 days.
- You can select dates from the past 90 days. Only data from when you started using Smoothwall will show in your reports.
- Select Run Report. You’ll be taken back to the Reports page, where you’ll see your report is generating with the status of In Progress.
- You’ll receive an email letting you know when the report is ready. Select View report now.
View the report
- To access the report, you can:
- Refresh your page if you are waiting for it to move from In Progress to Ready.
- Select the View report now button in the email.
- Sign in to the Cloud Portal and select Reports.
- Select between the Filter Reports or Multi Tenant Filter Reports tab if you have access to Multi Tenant reports.
- If you selected the Filter Reports tab and have a multi-tenant environment, select the Tenant the report was generated for at the top right of the page.
- Select the report to view the Report Overview and Report Data tabs, export and share the data or find out why you might not be able to view a report.
Use the Device Report
Report Overview
The Report Overview tab provides high-level summary graphs and charts of:
- Top Users: A summary of how many lines of data there are for each device user. You can use this to see if a specific device is being utilised, then drill down into the activities it is being used for.
- Top Domains Visited: The top 10 domains visited, including the Level.
- Search Terms: Words or phrases users have searched for, including the Level, frequency and whether access was allowed or blocked.
- Safeguarding Alerts: The number of breaches with each Safeguarding theme, including the Severity.
Tip
Select a segment in the Top User chart or a bar in the Top Domains Visited chart to see filtered Report Data.
Report Data
The Report Data tab gives you line-by-line full browsing activity.
- Use the Column Selector to customise the columns shown in the table. You can’t remove the Username, Url or Action columns.
- Use the magnifying glass to search within a column. Searching for a Top Level Domain will show results from subdomains, but entering a subdomain won’t show results for the Top Level Domain.
- You can see the timestamp for each access request. The most recent events are shown at the top.