File operation log records user operations on files. The operation time and operation type are recorded.
To view file operation logs:
From the navigation pane, select Policies > Behavior Policies > Logs > File Operation Logs.
The page that opens displays the file operation logs.
To filter the file operation logs, specify the filtering criteria. You can export the displayed logs on the page.
To download the file operation logs, click the Downlink.
Account Name: Access account of the endpoint. This column is displayed after the EIA component is installed.
System Login Name: Login account of the endpoint OS. This column is displayed when the EIA component is not installed.
Asset Number: Asset number assigned to the endpoint upon asset registration.
Asset Name: Asset name reported after endpoint asset registration. For a PC, the asset name is the name of the PC.
MAC Address: Endpoint MAC address in desktop asset management.
Terminal IP Address: Endpoint IPv4 address in desktop asset management.
Timestamp: Time when the file operation was performed and the server was used. The format is yyyy-MM-dd HH:mm:ss.
Created At: Time when the file was created and the client was used. The format is yyyy-MM-dd HH:mm:ss.
Edited At: Time when the file was most recently edited and the client was used. The format is yyyy-MM-dd HH:mm:ss.
Process Name: Name of the process that performed the file operation.
Operation Type: Select an operation. Options include Create, Rename, Delete, Copy, Read, and Modify.
File Name: Name of the file.
File Size: Size of the file in KB.
Absolute Source File Path: Path for storing the source file. The source and target files exist in operations such as a copy operation.
Absolute Target File Path: Path for storing the target file. The source and target files exist in operations such as a copy operation.
Source File Disk Type: Options include Fixed Disk, Drive Without Root Directory, Removable Disk, Network Drive, Optical Drive, Virtual Memory Drive, and Unknown Drive.
Target File Disk Type: Options include Fixed Disk, Drive Without Root Directory, Removable Disk, Network Drive, Optical Drive, Virtual Memory Drive, and Unknown Drive.
Registered USB Device Name: Name of the monitored USB device displayed on the PC.