The new Report Database provides direct, easy, and fast access to data, and low-latency, real-time analytics. With its elaborate, distributed system, it is highly scalable handling petabytes of data.
The Report Database is easily distributed across a cluster, that is, a collection of one or more servers that together stores your data and provides federated indexing and query capabilities across all servers, allowing simultaneous searching of multiple resources.
The server or metric server extracts the data for all reporting, improving performance, and replaces the old report engine.
The Report Database is a NoSQL database built for speed and provides a scalable solution that is optimized for analytics retrieval.
Import data is now required for all reporting, and enabling the database is no longer an option. As a result, the Data Management – Report Database – Configuration – Enable screen was removed.
Since all data now resides in the metric server, the Low-Level Database section was removed on the Data Management – Report Database – Configuration – Settings screen.
Reports
The reports provide more relevant data such as time online, percentage of time online, trend in bytes, bytes, and percentage of bytes, along with visits and hits.
The Table of Contents section was removed.
The Report Highlights section now shows Data Source as Query Server and includes information such as Total IDs With Visits, Total Visits, Total Hits, Number of URLs in Report, Total Bytes, and Total Denied Requests.
The report sections now include Top Groups, Top Users, Top Categories, and top users in category as appropriate.
Audit Details section:
The audit detail data is no longer grouped by user ID. It is sorted by date/time for all selected users.
The User column was added and shows the full name and user ID.
In the Category column, “(Hit)” is now displayed before the category name instead of after it.
When the Maximum URLs limit set in Report Options is reached, a message is displayed at the end of the report results.
The Appendix is displayed only when the report is printed.
The following reports were deemed obsolete and removed from the Report Selection screen:
Acceptable Visits
All User Summary
Custom Categories
Neutral Visits
Audit Data Export
Top Noncategorized Sites Report – Available when you participate in the Wavecrest OtherWise Program
The following reports were renamed:
From Denied Detail to Denied Requests Detail
From Denied Visits to Denied Requests
The reports were reorganized on the Report Selection screen, and their short descriptions were updated in the Tooltip.
When running a report, the start date of the Custom date range now defaults to the last seven days when switching from a predefined date range to “Custom.”
The Time Frame Filter field was removed from the Create Report page. This feature is not supported at this time.
Top Charts. Top charts now show 15 results in the bar or pie chart.
Report Options. The Maximum Hyperlinked URLs option was renamed “Maximum URLs” and now displays all URLs as hyperlinks regardless if this value is less than the actual number of URL results in the report.
Ungrouped IDs. When running a high-level summary report, new users will no longer be added to Ungrouped IDs. To place new users in Ungrouped IDs, you can import or manually add them.
Abuse Thresholds. This feature is not supported at this time and was removed from the following:
User Management – Edit Users – Add & Modify
User Management – Search Users
Reports – Manager
System Status – Policy
Settings – Reports
Syslog Log Data
Statistics for syslog log data were added which can be viewed after configuring your syslog log file configuration. Go to System Status – Syslog to see this data.
In Profiling, improved debugging was added for syslog.
Check Point Log File Configurations
The Check Point Log Exporter (HTTP) and Check Point Log Exporter (HTTPS) configurations were added.