Statistics on Component Operation

You can review the statistics on operation of the main Dr.Web components.

To open the statistics on important events of protection component operation

1.Open Dr.Web menu Dr.Web icon, then select Security Center.

2.In the open window, select Statistics tab.

3.The Statistics page opens where reports for the following groups are available:

Detailed Report

Office Control

Threats

Firewall

Figure 96. Statistics on component operation

4.Select a group to review the reports.

Detailed Report

In this window, the detailed information on all the program operation events is collected.

Figure 97. Detailed report window

The following information is logged in the report:

Date—date and time of an event.

Component—the component or module that caused the event.

Event—a brief description of the event.

By default, all events for all the time are displayed.

The management elements Filter, Details, More are used to work with objects in the table.

You can use additional filters to select certain events.

Office Control

In the Office Control group, you can view the statistics of blocked URLs for every user account.

Figure 98. The Office control statistics window

The following information is logged in the report:

Date—date and time of blocking.

Blocked resource—the link to the blocked resource.

Reason for blocking—the category or exclusion list that the blocked resource belongs to.

By default, all events for all the time are displayed.

The management elements Filter, Details, More are used to work with objects in the table.

You can use additional filters to select certain events.

Note

The statistics also includes the information on external resources integrated with other webpages, such as embedded widgets. Having such resources in the statistics does not mean that the user has tried to visit these websites intentionally.

Threats

On the Threats tile on the main statistics window, the information on the total number of threats for a certain period of time is shown.

When choosing this option, the Detailed Report window with predefined filters for all the threats will open.

Figure 99. Statistics on threats window

The following information is logged in the report:

Date—date and time of the threat detection.

Component—the component that has detected the threat.

Event—a brief description of the event.

By default, all events for all the time are displayed.

The management elements Filter, Details, More are used to work with objects in the table.

You can use additional filters to select certain events.

Network activity

You can view the report of network activity if Dr.Web Firewall is installed on your computer.

To view information on active applications, an application log, and a packet filter log, select necessary object from the drop-down list.

Figure 100. Statistics on network activity window

The report shows the following information for every active application:

Direction

Operation protocol

Local address

Remote address

Size of sent data packet

Size of received data packet

You can block one of the current connections or allow previously blocked connection. For this, select a required connection and right-click. Only one option is available, depending on the connection status.

The application log shows the following information:

Application start time

Application name

Application processing rule name

Direction

Action

Endpoint

To enable the application logging, go to Firewall page and then open Add or Edit application rule window. For the detailed information, refer to the Application rule settings section.

Packet Filter Log shows the following information:

Start time of data packet processing

Direction

Processing rule name

Interface

Packet data

To enable packet filter logging, go to Firewall page and then open Add or Edit packet filter rule window. For the detailed information, refer to the Rule sets for filtering packets.

When clicking at one of the columns, the events are arranged in ascending or descending order.

Filters

To view a list of only those events that correspond to specific parameters, use filters. All the reports have preset filters that are available by clicking Filter. You can also create custom event filters.

The buttons to manage table elements

To set custom filter

1.To filter by a specific parameter, click on the heading of the required column:

Filter by date. You can select one of the predefined periods specified in the left part of the window, or specify your own. To set the required period, select the start date and the end date of the period in the calendar, or specify the dates in the Period field. Filtering by date is also available in ascending or descending order.

Figure 101. Data sorting

Filter by component. You can check the components the information on which will be included in the report, or arrange the entries by ascending or descending order.

Filter by event. You can check the events to be shown in the report, or arrange the entries by ascending or descending order.

For Office control statistics, in addition to the date filter, the following options are available:

Filter by blocked resource. You can sort entries in ascending or descending order only.

Filter by reason for blocking. You can check the reasons for blocking to be shown in the report, or arrange the entries by ascending or descending order.

2.Once the filter parameters selected, click Apply. Selected items will be displayed above the table.

3.To save the filter, click Filter and select Save filter.

4.In the open window, enter a name for the new filter. Click Save.