DeviceLock Service : Managing DeviceLock Service for Windows : Audit Log Viewer (Service) : Managing the Audit Log (Service)
  
Managing the Audit Log (Service)
The log can be managed by using commands from the shortcut menu:
•In the DeviceLock Management Console tree, expand DeviceLock Service, and then right-click Audit Log Viewer under the DeviceLock Service node.
- OR -
•In the DeviceLock Management Console tree, select DeviceLock Service > Audit Log Viewer, and then right-click any list record in the details pane.
The shortcut menu provides the following log management commands (next to the command name is the toolbar button corresponding to that command):
•Settings - View or change the settings that limit the maximum number of event records the log may contain (see Audit Log Settings (Service)).
•Save - Save the log to the file you specify.
•Clear - Delete all event records that currently exist in the log.
This command also adds a deletion record to the log, indicating how many records have been deleted as well as who performed the deletion and from what computer.
•Refresh - Update the list of events with the latest information.
•Filter - Display only the events that match the conditions specified (see Audit Log Filter (Service)).
•Quick filters - Choose from the following options to view the events that occurred during:
•Current day
•Current week
•Current month
•Current year
To cancel the quick filter that has been applied, select the same filter option again or use the Remove filter command.
A regular filter enabled by the Filter command disables quick filters, and cancels the current quick filter (if any was applied). To enable quick filters, disable the regular filter (for example, by using the Remove filter command).
•Remove filter - Show all records by disabling the currently applied filter.
•Send Data to Server - When the DeviceLock Enterprise Server(s) parameter is configured and the DeviceLock Log option is selected for the Audit log type parameter, the Send Data to Server command can be used to send log data to the DeviceLock Enterprise Server as soon as possible. Since the server collects log data automatically as it accumulates on the DeviceLock Service, the use of this command is optional.