TRITON - Web Security Help, Version 7.7 - Websense

Reporting Administrationdefinitions, trend data, the mapping of users to groups, database jobs, and so forth.The catalog database also maintains a list of all the available database partitions.Database partitions store the individual log records of Internet activity. There are 2partition types:The standard logging partition (wslogdb70_1, wslogdb70_2, etc.) storesinformation about all logged Internet requests. Information from the standardlogging partition is used to populate investigative and presentation reports, as wellas dashboard charts.The threats partition (wslogdb70_amt_1) stores information about requests thathave been assigned a severity level (see How severity is assigned to suspiciousactivity, page 39). Information from the threats partition is used to populate theThreats dashboard.New standard logging partitions are created based on size or date interval. SeeConfiguring database partition options, page 421, for more information.When partitions are based on size, all incoming log records are inserted into themost recent active partition that satisfies the size rule. When the partition reachesthe designated maximum size, a new partition is created for inserting new logrecords.When the partitions are based on date, new partitions are created according to theestablished cycle. For example, if the rollover option is monthly, a new partition iscreated as soon as any records are received for the new month. Incoming logrecords are inserted into the appropriate partition based on date.Database jobsDatabase standard logging partitions provide flexibility and performance advantages.For example, you can generate reports from a single partition to limit the scope of datathat must be analyzed to locate the requested information.TRITON - Web Security Help | Web Security Solutions | Version 7.7.xThe following database jobs are installed along with the Log Database.ImportantIf you are using a full version of Microsoft SQL Server(not Express), the SQL Server Agent service must berunning on the database engine machine. Make sure thatthis service is configured to start automatically when SQLServer or the machine is restarted.The Extract, Transform, and Load (ETL) job runs continuously, receiving datafrom Log Server, processing it, and then inserting it into the standard loggingpartition database. When trend data retention is enabled, the ETL job is alsoresponsible for inserting trend data into the catalog database.The ETL job must be running to process log records into the Log Database.TRITON - Web Security Help 419