Logs and Reports
-
View Traffic Logs
See moreThis article provides instructions on how to view traffic logs, an important step in troubleshooting agent and network-related issues.- View all the traffic in your network with details on Timus Manager -> Insights -> Traffic Logs page,
- Search the list using Time, Source, Action, Destination, Factor parameters on the Logs tab.
- Clear the filters you have created by clicking on Clear All Filters.
- You can gather more information by clicking the icon in the Details section to identify if there's been an issue.
- You are able to check the Rule IDs of the traffic logs to detect which rule allows or denies the traffic.
- If you have previously enabled SSL Inspection for a user or device, you can access detailed data by going to the User or Device tabs.
In the Traffic Logs page, where you can access comprehensive data presented through tables and graphics organized into various tabs. Here's an overview of what you'll find in each tab:
You can download the csv file to get a report for your traffic by clicking on Export at the top right of the screen as shown in the image above.
Only the last 10.000 records will be exported when you have created it.
When you have clicked on the Export button, you will see the pop-up above when the Export process is completed successfully. You can click on Download to get your report.
- User Tab: User Information Top Most Active Users Detailed User Logs Most Active Devices per User Traffic Analysis Most Frequently Accessed Resources Time Spent by Users
- Team Tab: Top Most Active Teams Team-specific Activity Data Most Active Devices within Teams Most Used Resources by Teams Time Spent by Teams
- Device Tab: Device Information Most Active Devices Device-specific Activity Data Most Used Resources by Devices Time Spent on Devices
- Applications Tab: Most Used Applications Application-specific Usage Data
- Website Tab: Most Accessed Resources on Websites
- Network Tab: Most Active Networks
This organized approach allows you to analyze user behavior, team activities, device usage, application preferences, website interactions, and network engagement.
Dive into detailed insights to make informed decisions about your product usage and optimize your resources effectively.
-
View User Traffic
See moreThis article explains how to view user traffic and their details on your network.To view detailed user traffic for each user, follow the steps below:- Go to Timus Manager -> Insights -> Traffic Logs page.
- You can view all traffic on the Logs tab without navigating to other tabs.
- To configure the list, utilize the search bar. To view a specific user's traffic, navigate to the Source heading.
- Click on "Select" here.
- Click on "User".
- Click on "Start typing..." Select a user or scroll down the dropdown menu to find a user and view their traffic logs.
Click on the "Search" button.
By clicking the Search button, you can access a list displaying all the traffic generated by this user on your network.
To access the details of the traffic logs listed, click on the blue info icon located at the far right of the respective line.
You can use the Search bar to display more specific information about the logs you want to see.
Simply insert the desired columns with the appropriate command:
Time: Select the Start and End date of the traffic logs you want to display on the list.
Action: Choose between Drop or Allow.
Destination: Specify Team, Device, IP, Network, Site, or Any.
Factor: Specify Application, Category, Website, Keywords, or Any.
- Similarly, to see a user's traffic logs and in general, to view all user's traffic logs Click the User tab on this page.
- To view detailed user traffic, select a user from the Select section at the top of the page.
After selecting the user, you display the following information on the page.
- Most Active Users,
- Users Logs,
- The user's Most Active Devices,
- Traffic,
- Applications and Websites as the user's Most Used Resources,
- Time Spent as applications and websites where the user spends the most time,
- The user's Events on your network.
You can also view traffic details for the following components by going to the Insights dropdown > Traffic Logs page:
- Logs
- User
- Team
- Device
- Application
- Website
- Network
-
View Alerts
See moreThis article explains how to view alerts generated by zero trust security policies in Timus Manager.- To view alerts for a selected policy type with an activated status, go to
Timus Manager > Insights > Alerts page. - The total number of alert records can be found at the bottom of the page.
- You can navigate between alert list pages using the total records filter in the lower-right corner of the page.
To turn on these notifications, go to the Alerts & Notifications tab on the Zero Trust Sign-In Policies pages. (User/Admin)
To filter your alerts, use the Search filter located at the top of the Alerts page:
- Enter the Title.
- Select an option in Result- Failed, Successful, or Timeout.
- Select a Type - User Sign-In Policy or Administrator Sign-In Policy.
- Specify the Severity level - Any, High, Medium, or Low.
- Set the Time.
- Click on the Search button.
-
- Your filtered alerts will be displayed below based on your selections.
-
- You can download the Alerts as a csv file by clicking on Export at the top right of the screen. Once you click on it, you will see a pop-up screen as shown in the image below. You can click on Download to get your report related to the Alerts.
-
- To View Details of an alert, click on the ellipsis icon at the end of the alert line.
-
- Mark the alert as Read/ Unread. When you mark it as read, the text will be faded out.
- Delete the alert.
- To view alerts for a selected policy type with an activated status, go to
-
View Events
See moreBy filtering sign-in events in your network, you can view the results based on criteria such as risk level, location, and authentication type.- You can search for these events with the parameters User or Admin.
- To search for events, enter Public IP in the designated field and select a date from the Date/Time filter.
- You can choose a Risk Level or leave it blank.
- Once you have entered the necessary information, click the Search button.
- Your search results display Event, Authentication, Risk Level, Location and Time data based on the information you provide.
-
Authentication field shows the steps of authentication, and the result of the each step. Green text indicates that step is successful, red means that failed.
-
You can download a report as a csv file on both tabs, User and Admin, by clicking on Export button at the top right of the screen as shown in the image above. Once you click on Export, you will see a pop-up screen where you can click Download to get your report as a csv file.
View Event Details
You can see the details of the each by clicking on the ellipsis icon at the end of the row:
- Click the ellipsis icon in the row containing user or administrator information, and select View.
- Scroll down to view the IP Intelligence section in the Event Details window.
- On this section, you can see IP Intelligence information related to the IP address of the device used for sign-in:
The IP Intelligence section is only visible when a sign-in policy with the Untrusted IP Behavior has been defined for the specific IP.
- Proxy: Shows if a proxy server is detected.
- VPN: Shows if a VPN server is detected.
- TOR: Shows if a TOR network node is detected.
- Fraud Score: Shows the fraud score (1-100).
- Abuse Velocity: Shows abuse velocity (high/medium/low).
- Recent Abuse: Shows if recent abuse detected.
- Bot Activity: Shows if bot activity detected.
-
Automated Reports
See moreThis article provides guidance on how administrators can utilize the Automated Reports feature in Timus Manager.This Timus Manager feature provides enhanced visibility, facilitating improved decision-making for administrators within their Timus network.It offers comprehensive insight and analysis through AI-generated reports that can be accessed on-demand or scheduled.To create new reports and view all network activity at once, follow these steps:Manage Templates
- Go to Timus Manager -> Insights -> Automated Reports page.
- To manage templates, click on the "Manage Templates" button located in the upper right corner of the Reports page.
- From here, you can view the available templates, which are divided into two categories:
Predefined and Custom.
Before creating a report, it is important to first manage the templates. This will allow you to choose analytics and insights you want to include in your report, using either predefined or custom templates.
To view the template or create a report using Timus's default Predefined Weekly Template, click the ellipsis icon next to it.
You also have the option to use the template as a basis for a new one:
Create Custom Template
To create a custom template,
- Click the "Create Custom Template" button in the Manage Templates screen and enter the title of the new template.
- After entering a title for the new template and clicking the Create Custom Template button, the page for your newly created template will be displayed on your screen.
-
To add widgets to the template's screen, click the "Add Widget" button. This will open the
"Add Widget" pop-up window where you can select the widgets you want to display. -
After you click the "Add" button, use the drag-and-drop method to move widgets around the page and arrange the template as desired.
-
If you want to view different data ranges or components, you can add the same widget multiple times.
-
Click "Configure" to adjust the number of components displayed in the tables and view data in the widgets with different Data Range Types.
-
-
You can choose between Relative or Fixed data range types and select Daily, Weekly, Monthly, or Yearly parameters for the Data Range.
You can then configure the template by clicking on the ellipsis icon next to the template's name on the "Manage Templates" screen.Create Report
To create a report, first complete the template configurations.- Next, go to the Reports page and then, either click the "Create Report" button or select
"Create Report" from the ellipsis icon of the template row on the Manage Templates pop-up screen. - On the Create Report screen, enter a title for the report.
- Select the Type of report and Template.
- Add recipients from the Recipients section by entering their information and selecting their email language.
- Click "Save" and wait for the Successfully Created notification to appear.
- To view the report, click the ellipsis icon in the row of the report you created, then click "View".
- To generate the report, click the Actions button in the upper-right corner of the Reports page and select "Generate Report".
- You will see a notification that says "Report Result successfully created. Click here to see the result in your browser".
- Click "Here" to view your on-demand report in your browser.
- When you add a Recipient, your report will be sent to their e-mail address.
- If you've scheduled a report, the system will automatically generate and send it to the recipient of your choice.
- The automated report you created for Daily events is scheduled to run every day without any issues.
- For Weekly events, the report is set to run every Monday.
- Monthly reports are generated on the 1st day of each month, such as November 1st and December 1st.
- Yearly reports are generated on January 1st of every year.
Once your report is created, you can view the results by clicking on the Actions button and selecting the Go to Results page option on the report's page.
The generated reports will be saved on the report's page. You can access and view all reports generated on different dates by using the Displayed Report filter.
To configure the widgets, click on the "Show Template" option located on the report page. This is the same process as when you access it from the "Manage Templates" -> "Edit" page.
-
View Blocked IP Addresses
See moreThis article shows you to how to view blocked IP addresses in your Timus network.Access control with Timus Zero Trust Policies is based on user behavior, making it easy for administrators to monitor and manage blocked IP addresses on their organization's network.To access logs of IP addresses blocked due to risky login attempts and default sign-in policies, go to the Timus Manager -> Insights -> Blocked IP Addresses page.- On this page, you can view the user associated with the blocked public IP, its location, the time it was blocked, and the policy denying access under zero trust.
- Additionally, you can adjust the duration for removing address blocks using the Settings button on the page.
-
View User Activity
See moreTo view user activity on your corporate network, follow these steps:- Go to Timus Manager -> Users & Teams page and open the User tab.
- Find the user whose activities you want to see on the screen by clicking the ellipsis icon at the end of the line.
From this pop-up window, you can:
-
- View the user activity.
- Edit the user information.
- Delete the user from the network.
- Deactivate the user's account.
- Ban Login of the user.
- Reset Password of the user.
- Drop Connection of the user.
- Reset 2FA for the user.
- Click View in the window that opens.
- On this page, you can view all user activities on the network, including Behavior Analysis specified by the Most Signed-In Location, Device, and Time Ranges.
- You can view Events in a specific period using the Date/Time filter at the top right of the page.
- When you click on the Actions button at the top right of the page, you can perform the following actions for the user: Edit/Delete/Drop Connection.
-
View Active Devices
See moreThis article explains how administrators can easily monitor active devices connected to the Timus network.To monitor or remove an active device in your network, please follow the steps below:- Click on "Devices Online" in the Dashboard to go to the Devices page.
- Similarly, you can directly access the Devices page by clicking on it in the main navigation menu on the left.
- On this page, under the Status indicator, you will be able to see devices that are either online or offline.
You can Drop or manage the connection of any individual device or all devices associated with a user (for this, use the 'Bulk Actions' option for devices located on the right-hand side of the page).
Learn more about the device management.
-
Productivity Reports
See moreThis article explains how to view Productivity Reports on the Timus Manager.Productivity Reports will be created as long as Productivity Trackeris enabled and the users are signed in the Timus Connect App.To be able to see the reports, you can go to Insights -> Productivity Reports page as shown in the image below, and you will be able to see the Most Productive Users/Teams and Used Applications on this page.Please note that you can export the data by clicking on the Export button at the right top of the tabs, Users, Teams and Applications. Once you click on it, you will see the pop-up as shown in the image below.To be able to see the reports for the users, you can go to the tab Users as shown in the image below, and you are able to see the Most Active Users, Productive Users and Unproductive Users here.Once you click on the Details of the users as shown in the image above, you will be able to see the details of the user, which you have chosen, as shown in the image below.If you click on the Details of the Application, you will be able to see the time spent on the application.To be able to see the reports for the teams, you can go to the tab Teams as shown in the image below, and you are able to see the Most Active Teams, Productive Teams and Unproductive Teams here.Once you click on the Details of the team, you will be able to see the Active Time, Productive, Unproductive and Productivity of the users including a dashboard as shown in the image below.To be able to see the reports for the applications, you can go to the tab Applications as shown in the image below, and you are able to see the Most Productive Applications, Unproductive Applications, Neutral Applications here.Once you click on the Details of the Application page, you will be able to see the Users' activities according to the Application as shown in the image below. -
IPsec Logs
See moreThis article provides instructions on how to view IPsec logs to troubleshoot IPsec site-to-site tunnels.- To be able to view the IPsec logs you need to go to the Timus Manager -> Sites -> hit the 3 dots at the end of the Gateway, which you would like to have an IPsec tunnel with.
- Once you click on 3 dots, you will be able to see the View page of the gateway, and you need to click on 3 dots at the right top of the page and follow the View Connector Logs in order to see the logs belonging to the IPsec.
- The IPsec logs are refreshed every 3 minutes.
- Once you click on View Connector Logs, you will be able to see the logs regarding the IPsec tunnel, which you would like to establish.