The application message log stores information about errors in application operation and about errors in operations performed by system processes of Kaspersky Industrial CyberSecurity for Networks.
To view application messages:
Connect to the Kaspersky Industrial CyberSecurity for Networks Server through a web browser.
Select the Settings section and go to the Application messages tab.
The table will display application messages that match the defined filter and search settings.
The columns of the application messages table contain the following information:
Date and time – date and time of registration of the application message.
Status – name of the message status. The following statuses are available for messages:
Getting started, Normal operation – for informational messages.
State unknown, Malfunction – for messages about non-critical malfunctions in application operation.
Moderate malfunction, Critical malfunction, Fatal malfunction – for messages about disruption of application operation.
Node – name or IP address of the node from which the message originated.
System process – application process that invoked message registration.
Message – numerical identifier and text of the message.
When viewing the application messages table, you can use the following functions:
When filtering by a defined period, the table will no longer be updated. The table displays only the messages that were registered during the specified period.
To configure application message filtering based on a specified period:
On the Application messages tab, in the Settings section, perform one of the following actions:
Open the Period drop-down list in the toolbar.
Click the filtering icon in the Date and time column.
In the drop-down list, select Specify a period.
If table updates are enabled, in the opened window confirm that you agree to suspend table updates.
On the right of the Period drop-down list in the toolbar, you will see additional buttons that you can use to manually define the filtering period.
Click any of the buttons containing a date and time value in the From and to fields.
The calendar opens.
In the field under the calendar on the left, specify the date and time for the start boundary of the filtering period. In the field under the calendar on the right, specify the date and time for the end boundary of the filtering period. If you want to remove the limit for the end boundary of the period, delete the value in the field under the calendar on the right.
To enter a value in the field, you can select a date in the calendar (the current time will be indicated) or manually enter the necessary value in the format DD-MM-YYYY hh:mm:ss.
Click OK.
The table will display application messages for the period you specified.
When filtering by the Date and time column, you can use one of the standard periods or define a specific period.
To filter the application messages table by the Status or System process column:
On the Application messages tab in the Settings section, click the filtering icon in the relevant column.
When filtering by status, you can also use the Statuses drop-down list in the toolbar.
The filtering window opens.
Select the check boxes opposite the values by which you want to filter events.
Click OK.
To filter the application messages table by the Node or Message column:
On the Application messages tab in the Settings section, click the filtering icon in the relevant column.
The filtering window opens.
In the Including and Excluding fields, enter the values for application messages that you want to include into the filter and/or exclude from the filter.
If you want to apply multiple filter conditions combined by the logical operator OR, in the filter window of the column click the Add condition button and enter the condition in the opened field.
If you want to delete one of the created filter conditions, in the filter window of the column click the icon.
On the Application messages tab, in the Settings section, enter your search query into the Search messages field. The search is initiated as you enter characters.
The application messages table displays entries that meet the search criteria.
The search is performed based on the Node and Message columns.
To reset the defined filter and search settings in the application messages table:
On the Application messages tab in the Settings section, click the Clear filter button in the toolbar (this button is displayed if the filter and/or search settings are defined).
On the Application messages tab in the Settings section, click the header of the column by which you want to sort.
If you need to sort the table based on multiple columns, press the SHIFT key and hold it down while clicking the headers of the columns by which you want to sort.
The table will be sorted by the selected column. When sorting by multiple columns, the rows of the table are sorted according to the sequence of column selection. Next to the headers of columns used for sorting, you will see icons displaying the current sorting order: in ascending order or descending order of values.
icon.