TRITON - Web Security Help, Version 7.7 - Websense

Use Reports to Evaluate FilteringThe Status Log section lists each job that has changed in some way, showing thescheduled start time for the job, the actual end time, and the status.Outliers reportsClick Clear Status Log to remove all entries in the Status Log section.TRITON - Web Security Help | Web Security Solutions | Version 7.7.xRelated topics: Investigative reports, page 156 Summary reports, page 159An Outliers report shows which users have the most unusual Internet activity in thedatabase. Websense software calculates the average activity for all users per category,per day, per action (disposition), and per protocol. It then displays the user activity thathas the most statistically significant variance from the average. Variance is calculatedas the standard deviation from the mean.1. On the main Investigative Reports page, generate a summary report that displaysthe information for which you want to see outliers. The report selectionsunderlined and shown in blue beside the Internet Use by field are reflected in theOutliers report.For example, to view outliers by hits for a particular category, select Category inthe Internet Use by list, and select Hits as the Measure.NoteOutliers reports cannot be generated for browse time. Ifyou start from a summary report showing browse time, theOutliers report is based on hits.2. Click Outliers.The rows are sorted in descending order with the highest variance shown first.Each row shows:• Total (hits or bandwidth) for the user, category, protocol, day, and action.• Average (hits or bandwidth) for all users, for that category, protocol, day, andaction.• Variance from the average for the user.3. To see an individual user’s activity in this category over time, click the user name.For example, if one user’s activity is noticeably high for a certain day, click thatuser’s name to see a report that gives a more in-depth understanding of the user’soverall activity.180 Websense Web Security Solutions