SmartView Web Application

Use Case – You are the system administrator at a small company and are concerned that some employees spend too much time looking at Facebook. You want a way to monitor the employee application use.

The SmartView Web Application is one of the SmartEvent clients that you can use to analyze events that occur in your environment. Use the SmartView Web Application to see an overview of the security information for your environment. It has the same real-time event monitoring and analysis views as SmartConsole. The convenience is that you do not have to install a client.

SmartView graphics do not display properly in Internet Explorer. Accessing SmartEvent server from the web (SmartView) is supported only from Google Chrome and Mozilla Firefox.

To log in to SmartEvent using SmartView Web Application:

Browse to
https://<Security Management Server IP Address>/smartview/
or
https://<Security Management Server host name>/smartview/

Note - The URL is case sensitive.

SmartView advantages:

• Available for non-admin users
• Export up to 1M logs
• Integrated top statistics and docked card
• Support for High Contrast theme

In SmartView (web browser):

In SmartView, you first filter for the application and then by user.

1. Click the + icon to open a new tab and select Views > Access Control
2. Right click the User column and drill down to see the user activity or create a filter for this user in your current view.

You can schedule for all activities for a user, but cannot set the system to trigger an alert at a certain threshold.

To access SmartView:

From the browser:

Go to: https://<management IP address>/SmartView/

SmartView opens by default in the General Overview tab. This shows the statistics, Software Blades, timelines, and more. Any open tabs from the previous session are retained. Note - SmartView log viewer is available even without SmartEvent, but the default page is different.

To open a new tab, click +.

The Audit Logs tab shows audit logs which are changes done in the management. The Logs > Logs View tab shows blade activities.

To select which columns are shown:

1. Right click on a column heading and select Profile editor.

   The Profile editor window opens.

2. Select fields to add to or remove from the selected profile.
3. Click OK.

To set user display preferences:

1. Click the arrow next to your user name and select User Preferences.
2. For Locale, select the display language.
3. For First day of the week, select the day of the week for the weekly logs to start.
4. For Theme, select Default or High Contrast. In High Contrast, the view display is white text on a black background.
5. In Default time frame, set the default timeframe for all the SmartView web application functionalities. The default value is Last 24 hours.

   Note - The default time frames on the SmartView web application and SmartConsole are not synchronized.

6. For Email server settings, select Edit to enter the email server details.
7. Click OK.

Exporting Logs

Apply a filter to select the logs you want to export. Currently, you can only export logs to Excel.

To export logs:

1. In the Logs tab, click Options and select Export > Export to Excel.

   The Excel Export window opens.

2. Select the Logs Amount.
3. Select the Exported Columns - All columns or Visible columns.
4. Click OK.
5. A popup shows when the export process starts. When you see a message that the exported completed successfully, click Download. All exported logs also appear in the archive tab.

Use Case for SmartView

Use Case – You are the system administrator at a small company and are concerned that some employees spend too much time looking at Facebook. You want a way to monitor the employee application use.

You can use the integrated Log Viewer in SmartConsole or the SmartView Web Log Viewer to look at the traffic logs.

In SmartConsole:

1. Go to Logs and Monitoring > View.
2. Click New, and select New View.
3. In the New View window, enter:
   • Name
   • Category – Select Access Control
   • Description (optional)
4. In the new window that opens, create a query. Click Options > View Filter and select blade and app control.
5. Click Add Widget to customize how you see the data that comes back from the query.

   Start with a Timeline of all events.

   In Table, you can create a table that contains multiple fields such as user, application name, and the amount of traffic. There are more widgets you can use: map, infographic, rich text, chart, and container (for multiple widgets).

   After you save the dashboard (done), you can schedule and get an automatic email at multiple intervals.

In SmartView (web browser):

In SmartView, you first filter for the application and then by user.

1. Click the + icon to open a new tab and select Views > Access Control
2. Right click the User column and drill down to see the user activity or create a filter for this user in your current view.

You can schedule for all activities for a user, but cannot set the system to trigger an alert at a certain threshold.