The Events page shows the activity events of the files and folders in the shares.

TRACE

A "Trace" is a set of events, which is stored in searchable database. By creating a Trace, events data is retrieved and saved in relational database. After that, you can view events.

To view the activity events of the files and folders, users need to:

1. Create an Event Trace or use an existing Event Trace.
2. Filter the events in the Event Trace as needed and create the event list.
3. Create summaries of the Event Trace if needed.

1. Create an Event Trace or use an existing Event Trace.

Click the CREATE TRACE button to create an Event Trace using filters or Session ID. Please note that streams are limited to up to 1 million events. Please use filters such as date range to limit the number of events in a stream.

Create Event Trace by filters

The following filters can be used:

• Period (pre-defined period)
• Since (start date)
• Until (end date)
• User ID
• Gateway (including Team Portal)
• Share

Since

Specify the start date of the events.

Until

Specify the end date of the events.

User

Filter by users who performed the event.

Gateway

Filter by the CacheDrive on which the event occurred.

Share

Filter by the share in which the event occurred.

Create Event Trace by session ID

Select the "Session ID" radio and enter a Session ID to import event logs from that session. Session IDs can be found on the Sessions page.

Click GET PREVIEW/STATISTICS to get the heatmap of the Event Trace, then click CREATE EVENT STREAM to complete the process. There is a limitation of maximum number of events in one Trace. So if GET PREVIEW/STATISTICS find more than the limit, you need to adjust filter.

Use existing Event Trace

Import event logs from a previously created Event Trace by selecting the radio of the Event Trace. 

Event Traces can be saved up to 10, the oldest Event Trace will be deleted when a new Event Trace has been created when the number of the trace reaches 10.

Click the pin icon to prevent the Event Trace from being deleted, If all 10 Event Traces have been pinned, the CREATE TRACE button will be unavailable.

2. Filter events in the Event Trace as needed and create the event list.

Once an Event Trace is created or selected, admins can filter the events on the EVENT LIST page to generate event list.

The events can be filtered using the following criteria:

• Since (start date)
• Until (end date)
• User
• Gateway (including Team Portal)
• Share
• IP Address
• Path Prefix
• Path Suffix
• Path Containing
• Path Regular Expression and its negation

The results can also be filtered by event type:

• All Events
• Event group(s)
• Event(s)
• Alternate Data Stream
• Event for Directory or/and File

Grouping for event logs:

Click SEARCH to view all events that meet the specified search criteria in the Event Trace.

Use different time zones to display events according to your needs.

• Use UTC Time Zone
• Use Local (Browser) Time Zone
• Use Time Zone Set in Preference

Choose which columns to display in the results list. Data can be sorted by clicking on the column header.

• Session ID
• Date/Time
• Gateway
• User ID
• Operation
• Share
• Path
• IP Address
• Host

Saving Search Results

Administrators can use EXPORT to save the search results as a CSV file by entering a name for the CSV file and clicking the "Save" icon.

You can download or delete saved CSV files from the EXPORTED CSV page.

3. Create a summary (pivot table) of the Event Trace.

Once an Event Trace is created or selected, admins can create summaries of the events in the Event Trace from the "SUMMARY" page to analyze. The summary will be presented as a Pivot table.

Up to 10 summaries can be saved. The oldest summary will be deleted when a new summary is created when the number of the summary reaches 10. 

Click the pin icon to prevent a summary from being deleted, If 10 summaries have been pinned, the CREATE SUMMARY button will be unavailable.

Create a summary

Click the CREAT SUMMARY button to create a summary of the events in the Event Trace. 

The events can be filtered using the following criteria:

• Since (start date)
• Until (end date)
• User
• Gateway (including Team Portal)
• Share
• IP Address
• Path Prefix
• Path Suffix
• Path Containing
• Path Regular Expression and its negation

Drag the fields to the same color boxes (Rows, Columns, and Values) to specify the rows, columns, and values of the Pivot table, then click the APPLY button to generate the Pivot table.

After clicking the APPLY button, the newly created summary will be displayed in the summary list with the pending status, you can click the refresh button behind the CREATE SUMMARY button to update the status of the summary.

After the status of the summary changes to ready, check the radio of the summary, the Pivot table will be presented on the "SUMMARY" page, as shown below, the table below shows the event numbers generated by different users in the different shares.

METRICS

The METRICS page is used to analyze the Events Heatmap. It contains three sections: the Events Heatmap (same as the Events Heatmap on the Dashboard), the DRILL DOWN page, and the STATISTICS page.

Events Heatmap

The METRICS page provides more methods to represent the heatmap, including linear, logarithm, and piecewise.

• linear: the depth of the cell color is linearly related to the number of events in the day.  
• logarithm: the depth of the cell color is related to the logarithm of the number of events on the day. When the number of events on different days varies greatly, using “logarithm” can better display the data.
• piecewise: admins can edit the piecewise curve by dragging control points to self-define the color for cells containing different numbers of events. Clicking the EDIT PIECEWISE button, the "Edit Curve" page will appear.

DRILL DOWN

The “DRILL DOWN” page is used to zoom in on the Events heatmap in a certain time period for a more detailed analysis of the heatmap. A new heatmap for the selected period will be generated.

Users can select a time period on the "Zoom Control" by dragging the sliders at both ends (the time period is limited to 90 days).

The below filters can be used to filter events to obtain the desired information.

• User
• Gateway (including Team Portal)
• Share

Enable the option “Include Deleted Entities”, the deleted users, gateways, and shares will be listed in the filters “Search by User”, “Search by Gateway”, and “Search by Share” also for the customer to select.

Enable the option “Microscope (0.1 hours)”, the resolution of the newly generated heatmap will be 6 minutes (default is 1 hour).

Easing Function, the newly generated heatmap has three ways to display – linear, logarithm, and piecewise.

After all criteria have been set, click the ZOOM button to generate the new heatmap for the set criteria, like below:

STATISTICS

The STATISTICS page provides bar chart to present statistical data for events.

The below filters can be used to filter events to obtain the desired information.

• User
• Gateway (including Team Portal)
• Share
• IP Address
• Since (start date)
• Until (end date)

After all filters have been set, click the FILTER button to generate the bar chart.

“Group By” can be used to group the events on the bar chart by “User”, “Share”, “Device” or “Client IP”.

The events on the bar chart can be displayed by three frequencies – Daily, Hourly, and "Per 0.1 hour" ("Per 0.1 hour" only can be used when the time period from “Since” to “Until” is in three days).

Enable the option “Log Scale”, the scales on the ordinate of the bar chart will be presented in logarithmic form. When this option is enabled, "Group By" will be unavailable.

Drag the sliders on both ends of the time axis of the bar chart to show the data in the selected time period more clearly.