Reporting

The Reports window is available for non-root users only when the general application setting UIReportsForRootOnly is set to No. Otherwise, the Reports window is available only for a root user.

Information about the performance of Kaspersky Endpoint Security tasks is recorded in reports.

Report data is presented in a table that contains a list of events. Each line in the table contains information about a separate event. Event attributes are located in the table columns. Events logged during the performance of various tasks have different sets of attributes.

The following reports, listed in a menu on the left, are available:

• Statistic. Contains statistical information about the File Threat Protection task and virus scan tasks. You can update the displayed report by clicking the Reload button.

  A reset of statistics for the File Threat Protection task occurs when the task is stopped. No reset of statistics for virus scan tasks occurs; instead, there is incrementation of the statistics while the application is installed on the computer.

• System audit. This report contains information about events that occur during interaction the user with the application. It also contains information about events that occur during general operation of the application.
• Threat protection. These reports contain information about events that are logged while the following Kaspersky Endpoint Security components are running:
  • Anti-Cryptor
  • File Integrity Monitoring
  • Firewall Management
  • File Anti-Virus
• On-demand tasks. These reports contain information about events that are logged while the following Kaspersky Endpoint Security tasks are running:
  • Scan tasks
  • Update
  • Integrity check

Reports use the following event importance levels:

• Informational events. Formal events that normally do not contain important information.
• Important events. Events that require attention because they reflect important situations in the operation of Kaspersky Endpoint Security.
• Critical events. Events of critical importance that indicate problems in the operation of Kaspersky Endpoint Security or vulnerabilities in the protection of the user's computer.

For convenient processing of reports, you can modify the presentation of data on the screen in the following ways:

• Filter the event list by the period of time.
• Use the search function to find a specific event.
• View the selected event in a separate section.

To view reports:

1. Open the main application window.
2. In the lower part of the main application window, click the Reports button.

   The Reports window opens.

3. To view a specific report, in the left part of the Reports window, select the required task or component.

   A report is displayed in the right part of the window and contains a list of events in the operation of the selected Kaspersky Endpoint Security task or component.

   By default, events are sorted, in ascending order, by the values in the Date column. You can choose a different order by clicking the required column header.

4. To view a detailed summary of each event in a report, select the relevant event in the report.

   The event summary is displayed in the lower part of the window.