| System Startup/Shutdown |
Records system startup and shutdown events in basic event logs. |
| User Login/Logout |
Records user login and logout events in basic event logs. |
| Start/Stop Activity |
Records application start and stop events in basic event logs. |
| Dial-up |
Records dial-up connection events in basic event logs. |
| Policy Control |
Records policy alert logs. |
| Hardware Changes |
Records hardware changes in asset logs. |
| Software Changes |
Records software changes in asset logs. |
| Windows System Logs |
Not recorded by default; can be enabled via policy. |
| Category |
Specifies system log categories: Application, Security, or System. |
| Level |
Specifies system log levels: Critical, Warning, Verbose, Error, or Information. |
| Applications |
Administrators can choose to record or not record specific applications, including only those with visible windows. Supports manual entry or selection by application category, with wildcard support. |
| Visible Windows Only |
Refers to applications that have a foreground window. |
| Applications |
Administrators can specify applications manually or select an application category; wildcards are supported. |
| Window Title Changes |
Not recorded by default; can be enabled via policy and applied to specific applications. |
| Applications |
Specify applications for window title recording manually or via application category; supports wildcards. |
| Web Browsing |
Administrators can exclude certain web browsing logs or record them for specific websites. |
| Website |
Enter website addresses manually (supports wildcards) or select from pre-defined website categories. |
| Keyword Search |
Administrators can choose to record or exclude searches for specific keywords or set rules based on the search platform's domain. |
| Search Keywords |
Specify keywords for logging; fuzzy matching is not supported. Wildcards are allowed, and multiple keywords can be separated by commas. |
| Domain |
Specify the search platform's domain; fuzzy matching is not supported. Wildcards are allowed, and multiple domains can be separated by commas. |
| Document Operations |
Logs document activities. Administrators can exclude certain documents to ensure only relevant logs are captured. |
| Drive Type |
Includes Hard Drive, Floppy, CD/DVD, Removable, Network, and Unknown drives. For example, logs from hard drives can be excluded. |
| File Name |
Specify file names to include or exclude; wildcards are supported (e.g., *.txt, *.log). |
| Application |
Specifies the application performing the document operations. |
| Print Operations |
Logs document printing activities on the client. |
| Printer Type |
Specify which printer types to include or exclude from logging. |
| Application |
Set the application used for printing documents. |
| Shared Documents |
Logs operations on shared documents. |
| File Name |
Specify the names of shared documents; wildcards are supported. |
| Network Address Range |
Specify the IP range of remote machines accessing shared documents; administrators can exclude specific machines from logging. |
| Remote Desktop Logs |
Records client remote desktop activities. Not recorded by default; can be enabled via policy. |
| Type |
Select which remote actions to record or exclude, including: Connect, Disconnect, Remote Create, Remote Access, Remote Copy to Local, Local Copy to Remote, Remote Copy to Mapped Drive, Remote Modify, Remote Rename, Remote Delete. |
| Email |
Records email content. Specific types of emails can be excluded from logging. |
| Email Type |
Choose the type of email: Standard, Web, Exchange, or Lotus. |
| Sent/Received |
Specify the email direction: Sent or Received. |
| Sender |
Specify sender email address; supports wildcards. Matching emails are recorded or excluded based on policy. |
| Recipient |
Specify recipient email address; supports wildcards. |
| Match Single Recipient |
If checked, policy applies if at least one recipient matches. If unchecked, all recipients must match. |
| Email Size (>=KB) |
Emails larger than or equal to the specified size are recorded or excluded. |
| Exclude Attachments |
Effective only in Record mode. If checked, email attachments are not recorded. They appear in the console as attached but cannot be viewed or saved. |
| Exclude Body |
Effective only in Record mode. If checked, the email body is not recorded and cannot be viewed in the console. |
| Instant Messaging |
Records instant messaging content. Administrators can select specific chat tools to monitor. |
| Chat Tool |
Select the chat tool(s) for logging. |
| Exclude Content |
Effective only in Record mode. If checked, chat content will not be recorded or viewable in the console. |
| Removable Storage |
Logs operations on removable storage devices. |
| Removable Storage Type |
Specify storage type: encrypted or unencrypted. |
| Application Statistics |
Records usage statistics for applications. |
| Web Browsing Statistics |
Records web browsing activity statistics. |
| Network Traffic Statistics |
Records network traffic data. |
