5.2 Application Logs
Application logs record the opening and closing of applications on client machines, as well as window and title switch information. Administrators can view these logs through the console.Select Menu → Logs → Application to view all application start/stop logs and window/title switch logs.
Application log types include: Start/Stop, Window Switch, Title Switch.
| Log Type |
Description |
| Start/Stop |
Records when applications are started or stopped on the client machine. |
| Window Switch |
Records logs when the user switches between application windows. |
| Title Switch |
Records logs when the user switches between multiple windows or titles within the same application—for example, switching between multiple tabs in a browser like maxthon.exe. |
Note:
- Due to the large volume of data, window switch and title switch logs are not recorded by default. You can enable recording of window title changes via Basic Policy → Log Recording Policy.
Application log records include the following attributes: operation type, time, computer, user, application, path/title, and more.
| Attribute Name |
Description |
| Operation Type |
Application start/stop and window/title switch events. |
| Application |
The process name of the application. |
| File Path |
For start/stop operations, records the full path of the application on the client machine. |
| Window Title |
For window/title switch operations, records the current window title of the application. |
The system displays all application logs by default. Administrators can also set various query conditions for selective and targeted searches.
| Query Condition |
Description |
| Path/Title |
Query based on the application's file path or window title. |
| Application |
Query by the application's process name; you can either manually enter the name or select a category or specific application from the application categories. |
Querying by application includes: manually entering the application name or querying by application category.
1) Manually Entering Application Name
You can directly type the application name you want to query in the input box, for example, qq.exe or *game*.exe.
2) Querying by Application Category
Click the "..." button on the right to open the Application Category window. The left pane shows the application categories, and the right pane lists all applications within the selected category.
To query an entire category, select Application Category on the left, then choose the desired category on the right, and click OK to perform the query.To query a specific application within a category, select the category on the left, find the application on the right, select it, and click OK to query that specific application.
Don't see what you're looking for?
