Managing reports in a local interface

In the local interface of Light Agent for Windows, you can generate the following types of reports:

• System Audit report. Contains information about events occurring during your interaction with the application and in the course of application operation in general, which are unrelated to any particular application component or task.
• All protection components report. Contains information about events that are logged in the course of operation of the following application components:
  • File Anti-Virus.
  • Mail Anti-Virus.
  • Web Anti-Virus.
  • System Watcher.
  • Firewall.
  • Network Attack Blocker.
• Report on the operation of an application component or task. Contains information about events that occur in the course of operation of a selected application component or task.

Report data is presented in the form of a table which contains a list of events. Each table line contains information on a separate event. Event attributes are located in the table columns. Certain columns are compound ones which contain nested columns with additional attributes. Events that are logged during the operation of various components and tasks have different sets of attributes.

By default, report events are sorted in the ascending order of values in the Event date column. The event importance level is also displayed next to the date of the event in the Event date column.

The following importance levels of events are available in reports:

• Information events.  icon. Formal events that do not normally contain important information.
• Important events. icon. Events that need attention because they reflect important situations in the operation of the application.
• Critical events. icon. Events of critical importance and functional failure that indicate problems in the operation of the application.

You can manage report data as follows:

• Filter the list of events by column values or custom conditions.
• Use the search function to find a specific event.
• Sort the list of events by each column.
• Maximize or minimize grouped data.
• Change the order and arrangement of columns that are shown in the report.
• View the selected event in a separate section.
• Save the report to a text file.
• Delete report information on application components and tasks that are combined into groups.

The application automatically removes records from report files after the time period defined in the application settings, or when the maximum size of the report file is reached. You can cancel these limitations or set other values for these settings.

View reports

To view reports in the local interface:

1. On the protected virtual machine, open the main application window.
2. In the upper part of the main application window, click the Reports link to open the Reports and Storages window.

   The Reports tab of the Reports and Storages window opens. The System Audit report is displayed under the Reports tab by default.

3. Do one of the following:
   • To generate the All Protection Components report, in the left part of the window in the Anti-Virus protection section, select the All protection components item in the list of components and tasks.

     The All Protection Components report is displayed in the right part of the window, which contains a list of events on the operation of all protection components of the application.

   • To generate a report on the operation of a specific component or task, in the left part of the window, select the relevant component or task in the list of components and tasks.

     A report is displayed in the right part of the window, containing a list of events in the operation of the selected component or task.

     By default, report events are sorted in the ascending order of values in the Event date column.

4. If necessary, use the filter, search, and sorting functions to locate the necessary event in the report.
5. If you want to view detailed information about a reported event in a separate section, select the event in the report.

   A section appears in the lower part of the window, with the attributes of this event.

Saving a report to file

In the local interface of Light Agent for Windows, you can save a generated report to a file in TXT or CSV format.

The application logs events in the report in a way as they are displayed on the screen: in other words, with the same set and sequence of event attributes.

To save a report to a file in the local interface:

1. On the protected virtual machine, open the main application window.
2. In the upper part of the main application window, click the Reports link to open the Reports and Storages window.

   The Reports tab of the Reports and Storages window opens. The System Audit report is displayed under the Reports tab by default.

3. Do one of the following:
   • If you want to generate the All Protection Components report, in the left part of the window, select the All protection components item in the list of components and tasks.

     The "All protection components" report is displayed in the right part of the window, containing a list of events in the operation of all protection components.

   • To generate a report on the operation of a specific component or task, in the left part of the window, select the relevant component or task in the list of components and tasks.

     A report is displayed in the right part of the window, containing a list of events in the operation of the selected component or task.

4. If necessary, you can modify how data is presented in the report by:
   • Filtering the list of events by column values or by custom filter conditions.
   • Running an event search.
   • Changing the order and arrangement of columns that are displayed in the report.
   • Sorting the list of events by each column.
5. Click the Save report button in the upper right part of the window.

   A context menu opens.

6. In the context menu, select the encoding for saving the report file: Save as ANSI or Save as Unicode.

   The standard Save as window of Microsoft Office opens.

7. In the Save as window, specify the destination folder for the report file.
8. In the File name field, type the report file name.
9. In the File type field, select the necessary report file format: TXT or CSV.
10. Click the Save button.

Removing information from reports

The application automatically deletes records in report files according to the values defined in the application settings. You can also delete information from reports in the local interface of Light Agent for Windows.

To remove information from reports:

1. On the protected virtual machine, open the application settings window.
2. In the left part of the window, in the Other settings section, select Reports and Storages.
3. In the right part of the window, in the Report parameters section, click the Delete reports button.

   The Removing information from reports window opens.

4. Select check boxes opposite the reports from which you want to delete information:
   • All reports.
   • General protection report. Contains information about the operation of the following application components:
     • File Anti-Virus.
     • Mail Anti-Virus.
     • Web Anti-Virus.
     • Firewall.
     • Network Attack Blocker.
   • Scan tasks report. Contains information about completed scan tasks:
     • Full Scan.
     • Critical Areas Scan.
     • Custom Scan.
   • Update task report. Contains information about completed update tasks:
   • Firewall rules processing report. Contains information about Firewall operation.
   • Control components report. Contains information about the operation of the following application components:
     • Application Startup Control.
     • Application Privilege Control.
     • Device Control.
     • Web Control.
   • System Integrity Monitoring Report. Contains information about the System Integrity Monitoring component operation.
   • Data from System Watcher. Contains information about System Watcher component operation.
5. In the Removing information from reports window, click OK.