TRITON - Web Security Help, Version 7.7 - Websense

Reporting AdministrationWhen consolidation is enabled, requests that share all of the following elementsare combined into a single log record:• Domain name (for example: www.websense.com)• Category• Keyword• Action (for example: Category Blocked)• User/IP addressThe log record includes the number of requests combined into the consolidatedrecord, as well as the total bandwidth for all of the consolidated requests.Reports run faster when the Log Database is smaller. However, consolidation maydecrease the accuracy of some detail reports, as separate records for the samedomain name may be lost.ImportantTo assure consistent reports, create a new databasepartition whenever you enable or disable consolidation.Also, be sure to generate reports from partitions with thesame consolidation setting.With Websense Web Security Gateway (Anywhere), when consolidation isenabled, numbers shown on Web filtering reports that include traffic blocked byscanning are lower than the numbers shown on scanning-specific reports. This isa side-effect of the way that scanning activity is recorded.2. If you enable consolidation, also specify the Consolidation time interval. Thisrepresents the greatest allowable time difference between the earliest and latestrecords combined to make one consolidation record.Decrease the interval to increase granularity for reporting. Increase the interval tomaximize consolidation. Be aware that a larger interval can also increase usage ofsystem resources, such as memory, CPU, and disk space.If you enable full URL logging on the Settings > Reporting > Log Database page,consolidated log records contain the full path (up to 255 characters) of the firstmatching site Log Server encounters.For example, suppose a user visited the following sites and all were categorized inthe shopping category.• www.domain.com/shoeshopping• www.domain.com/purseshopping• www.domain.com/jewelryshoppingWith full URL logging enabled, consolidation creates a single log entry showing 3requests for the URL www.domain.com/shoeshopping.416 Websense Web Security Solutions