Sonar has the ability to monitor users in real time as they use the content filter proxy. This can be useful as a diagnostic tool as well as keeping an eye on what the users are going.


To access the real time logging:

Navigate to "Monitor -> User"


  • If you are monitoring the web, leave it by default on "HTTP Proxy", however if you're monitoring email handled by Sonar, choose "SMTP Send" for all emails sent by Sonar, and "SMTP Receive" for viewing all emails received by Sonar.
  • The Filter box can be left blank or it's also useful for tracking any of the fields. Eg. If you don't know the username of who's on the computer but you know it's IP address, you can place this in the filter field.
  • Initial Line # defaults to 10, however you can start 50, 100 or 200 line back as well.
  • Search field has been designed to search the user list instead of having to scroll though it to find your user. You can only select one user at a time. If you don't know the username, or it's not active, you can choose "ALL" to monitor all activity.
  • Active Users Only: You shouldn't need to uncheck this but if cannot see the user and you want to check their usage from log on though to browsing the web, you can do so by unchecking the checkbox.
  • Refresh Users: This refreshes the "Active" users in the above list box.
  • Mapping Colours (This is available in Sonar version 3.2.13 and above): This allows you to choose the colours you you can more effectively spot anomalies. For example, you can set everything to white except for blocks which show up in red.


Once you've chosen your setup, click "Run" and watch the data flow. Click "Stop" when you want the data to stop again.

 

Examples:

  • Monitoring a User
  • Leave Choose File on "HTTP Proxy"
  • Leave Filter blank
  • Leave Initial Line # at 10
  • Search for the username in the list and choose it in the list below
  • Hit Run

 

  • Monitoring an IP (don't know the username)
  • Leave Choose File on "HTTP Proxy"
  • Filter: enter in the IP address eg. 192.168.2.30
  • Leave Initial Line # at 10
  • Leave Search Blank, and make sure "ALL" is selected
  • Hit Run
  • Monitoring Emails from a Specific User
  • Change Choose File to "SMTP Receive"
  • Filter: If you know the email address, enter it into the filter field.
  • Leave Initial Line # at 10
  • Leave Search Blank, and make sure "ALL" is selected
  • Hit Run