5.5 Document Operation Logs
Document operation logs record the actions of users on documents from client machines. By reviewing these logs, administrators can monitor document usage, provide reliable clues for investigating data leakage incidents, and enhance the security of electronic document management.
Select the menu Logs → Document Operation Logs to view the document operation logs. The logged information includes:
| Attribute Name |
Description |
| Operation Type |
Includes: Create, Access, Modify, Rename, Copy, Move, Delete, Restore, Upload, Download, and Burn. |
| Source File |
The name of the document being operated on. |
| File Type |
The type of the file being operated on. |
| File Size |
The size of the document being operated on. |
| Path |
The full path of the document. For Copy, Move, or Rename operations, both source and destination paths are recorded. |
| Drive Type |
The type of drive containing the document, including: Hard Disk, Floppy, CD/DVD, Removable, or Network Drive. For Copy or Move operations, both source and destination drive types are displayed. |
| Application |
The process name of the application used to operate the document. |
| Title |
The window title when operating the document. |
In document control policies or IM file transfer policies, document backup strategies can be configured. When triggered on the client machine, backup document logs are recorded, marked with a pin icon "
". For example, a copy operation is indicated with "
".
Double-clicking a backup document log opens its detailed properties. Next to the document name is a Copy button, which allows viewing or saving the backup document. Backup documents also support batch export: the right-click menu Export Backup Document can export specified or all backup logs, and Export Logs and Backup Documents can export both the logs and the backup documents simultaneously.
By default, all document operation logs are displayed. Administrators can also set various query conditions for selective and targeted searches.
| Query Conditions |
Description |
| Time and Range |
Common query condition. |
| Document: |
| Operation Type |
Defaults to all operation types. You can also select one or multiple types from the dropdown for queries, e.g., to search for all documents that were modified or copied. |
| Source: |
| Drive Type |
Defaults to all drive types. You can select one or multiple drive types from the dropdown to filter and only view logs from specified drive types. |
| File |
The name of the source document. When searching by type, you can select from the provided default types or manually add type names. |
| Path |
The path of the source document. |
| Target |
Applicable only to operations involving both source and target paths, such as Copy or Move. The following fields are effective for such operations: |
| Drive Type |
Defaults to all drive types. You can select one or multiple drive types from the dropdown to filter and only view logs from specified target drive types. |
| File |
The name of the target document. When searching by type, you can select from the provided default types or manually add type names. |
| Path |
The path of the target document. |
| Size |
Specify a file size range to query documents within a certain size range. |
| Application |
The name of the application used to operate the document. You can manually input the name or select a category or specific application from the application classification. |
| Title |
The window title when operating the document. |
| Has Backup Document |
By default, unchecked to display all logs (both with and without backup documents). Checking this box will filter the results to only show logs that have associated backup documents. |
Don't see what you're looking for?
