Viewing application messages

Expand all | Collapse all

The application message log stores information about errors in application operation and about errors in operations performed by system processes of Kaspersky Industrial CyberSecurity for Networks.

You can view application messages when connected to the Server through the web interface. If necessary, you can also configure forwarding of application messages to recipient systems via connectors.

To view application messages:

1. Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface.
2. Select Settings → Application messages.

The table will display application messages that match the defined filter and search settings.

The columns of the application messages table contain the following information:

• Date and time – date and time of registration of the application message.
• Status – name of the message status. The following statuses are available for messages:
  • Getting started, Normal operation – for informational messages.
  • State unknown, Malfunction – for messages about non-critical malfunctions in application operation.
  • Moderate malfunction, Critical malfunction, Fatal malfunction – for messages about disruption of application operation.
• Node – name or IP address of the node from which the message originated.
• System process – application process that invoked message registration.
• Message – numerical identifier and text of the message.

When viewing the application messages table, you can use the following functions:

• Filtering based on standard periods

  When filtering based on a standard period, the application messages table is updated in online mode.

  To configure application message filtering based on a standard period:

  1. Under Settings → Application messages, do one of the following:
     • Open the Period drop-down list in the toolbar.
     • Click the filtering icon in the Date and time column.
  2. In the drop-down list, select one of the standard periods:
     • Last hour
     • Last 12 hours
     • Last 24 hours.
     • Last 48 hours
  3. If table updates are disabled, in the opened window confirm that you agree to resume table updates.

  The table will display application messages for the period you specified.

• Filtering based on a specified period

  When filtering by a defined period, the table will no longer be updated. The table displays only the messages that were registered during the specified period.

  To configure application message filtering based on a specified period:

  1. Under Settings → Application messages, do one of the following:
     • Open the Period drop-down list in the toolbar.
     • Click the filtering icon in the Date and time column.
  2. In the drop-down list, select Specify a period.
  3. If table updates are enabled, in the opened window confirm that you agree to suspend table updates.

     The start and end date and time of the filtering period are displayed on the right of the drop-down list.

  4. Click the date of the start or end of the period.

     The calendar opens.

  5. In the calendar, specify the date for the start and end boundaries of the filtering period. To do so, select a date in the calendar (the current time will be indicated) or manually enter the value in the format DD-MM-YYYY hh:mm:ss. If you don't need to specify the date and time of the filtering period end boundary, you can choose not to select a date or you can delete the current value.
  6. Click OK.

  The table will display application messages for the period you specified.

• Filtering based on table columns

  When filtering by the Date and time column, you can use one of the standard periods or define a specific period.

  To filter the application messages table by the Status or System process column:

  1. Under Settings → Application messages, click the filtering icon in the relevant column.

     When filtering by status, you can also use the Statuses drop-down list in the toolbar.

     The filtering window opens.

  2. Select the check boxes opposite the values by which you want to filter events.
  3. Click OK.

  To filter the application messages table by the Node or Message column:

  1. Under Settings → Application messages, click the filtering icon in the relevant column.

     The filtering window opens.

  2. In the Including and Excluding fields, enter the values for application messages that you want to include in the filter and/or exclude from the filter.
  3. If you want to apply multiple filter conditions combined by the logical operator OR, in the filter window of the column click the Add condition button and enter the condition in the opened field.
  4. If you want to delete one of the created filter conditions, in the filter window of the column click the icon.
  5. Click OK.
• Searching application messages

  You can find relevant application messages by using the Search messages field under Settings → Application messages.

  The search is performed based on the Node and Message columns.

• Resetting the defined filter and search settings

  You can reset the defined filter and search settings in the application messages table by using the Default filter button in the toolbar under Settings → Application messages. The button is displayed if search and/or filter settings are defined.

• Sorting application messages
  1. Under Settings → Application messages, click the header of the column by which you want to sort.
  2. If you need to sort the table based on multiple columns, press the SHIFT key and hold it down while clicking the headers of the columns by which you want to sort.

  The table will be sorted by the selected column. When sorting by multiple columns, the rows of the table are sorted according to the sequence of column selection. Next to the headers of columns used for sorting, you will see icons displaying the current sorting order: in ascending order or descending order of values.