Skip to main content

View Application Block Activity in OneView

View block activity with the Activity Log tab on the Application Block page. This page displays data and trends to understand which applications are being blocked on endpoints. Use this data to adjust your Application Block rules as needed. 

View activity

  1. Log in to Malwarebytes OneView.
  2. In the left navigation menu, click Application Block.
  3. Endpoint activity displays.

The top diagram displays a timeline for all blocked activity within the last 30 days. Click on blocked timeframes to filter the table by blocked activity for this timeframe.  

Endpoint activity

The Activity Log tab displays blocked applications across all your sites and managed endpoints. Blocked records are retained for approximately 90 days. View the following information for each endpoint's activity record:

  • Application data: Name of the application executable blocked on the endpoint. 
  • Endpoint: The endpoint hostname with the blocked application.
  • Engine version: Malwarebytes endpoint agent engine version. 
  • Group: The group of the endpoint.
  • IP Address/CIDR: IP Address or CIDR of the endpoint. 
  • OS platform: The operating system platform of the endpoint.
  • OS release name: The operating system release name of the endpoint.
  • OS type: Whether the endpoint is a Workstation or Server. 
  • OS version: The operating system of the endpoint. 
  • Policy: OneView policy the endpoint is assigned under.
  • Rules: Block rules assigned to the endpoint.
  • Site: OneView site the endpoint is deployed under. 
  • User: User account on the endpoint. 

Sort data in the results list

The Activity Log table helps you manage the available information pulled from your endpoints. Use filters within this table to sort your block activity information into specified results. 

Customize data in the results list in the following ways:

  • Click Add / Remove Columns above the results list to choose which columns to display.
  • Drag and drop certain column headers to the results bar to group data by those parameters.
  • Use the filters Filters.png in the column headers to view specific data.
  • Hover your cursor over a column header to reveal a hamburger iconhamburger.png with options to pin and auto-size columns.

Export data

Download DNS activity information to your local machine for auditing purposes or external reporting. 

  1. Select all or check specific boxes for the rows you want to export.
  2. At the top-right of the Active Block Rules page, click Export.

 

Return to Application Block guide for OneView. 

Related articles