About Transaction Events
For Skope IT Transaction Events, go to Homepage > Skope IT >Transaction Events in the Netskope tenant. This page allows you to view transaction events.
The Transaction Events page offers a comprehensive log of all transaction events. This real-time view, accessible directly within the user interface, allows for immediate troubleshooting and diagnostics using live traffic data. You can efficiently locate specific events by utilizing filters in the Transaction Events table and view more granular information in the Transaction Events Details windows. This immediate access to data significantly accelerates the identification, analysis, and resolution of issues affecting user experience, application performance, or security posture.
You can use the data on the Transaction Events page to help with:
- Troubleshooting
- Investigating
- Reporting
Transaction Events Components
The Transaction Events page features many tools and filter options to provide you with useful data. The page contains the following components:
- Refresh Icon: You can click the refresh icon to fresh the page.
- Filters Menu: You can select from the filters to search for specific transaction events.
- Time: You can filter by time by selecting a timeframe from the dropdown time filter menu.
- Filters Drowndown: You can select from this filter menu to search for specific categories of events.
- Save As: You can save your filters selections.
- Transaction Events Table: This table shows a log of all transaction events.
- Columns: There are default columns that show a wide range of data about transaction events. However, you can customize the columns.
- Customize Columns: You can add or remove columns by clicking the gear icon.
- Transaction Events Row: Each row represents a specific transaction event. You can click the plus icon to open a window with additional information about that event.
- Page Control Options
- Page Numbers: You can click a specific page number to view different pages of the Transaction Events table. The events are listed in chronological order by most recent events on the first page of the table.
- Rows Per Page: You can customize the number of rows that will appear per page.
About Filters
You can use the Filters menu to filter the results by selecting from a wide range of filters. You can select from the following filters:
- Source IP (Client Connection)
- Egress Source IP
- Destination IP (Client Connection)
- Destination Port (Client Connection)
- Version (Client HTTP)
- SNI
- URL
- Site
- Scheme
- Https
- Http
- FQDN (URL)
- Path
- Access Method
- Client
- POP
- Error Type
- Justification Type
- Justification Reason
- Status Code
- Remote Status Code
- Transaction ID
- Action
- Action Reason
- Action (Real-time Protection Policy)
- Name (Real-time Protection Policy)
- Source IP (Real-time Protection Policy)
- Destination IP (Real-time Protection Policy)
- FQDN (Real-time Protection Policy)
- Categories (Real-time Protection Policy)
- SSL Bypass
- SSL Bypass Reason
- Action (SSL Policy)
- Name (SSL Policy)
- Source IP (Remote Connection)
- Destination IP (Remote Connection)
- Destination Port (Remote Connection)
- Name (Application)
- Suite
- Tags
- CCI
- CCL
- Excellent
- High
- Medium
- Low
- Poor
- Unknown
- Instance ID
- Activity
- User
- Group
- Process
- Authentication Source
- Object Name
- Object ID
- Object Type
Time
You can use the time dropdown filter menu to filter the logs by time.
About Transaction Event Details
You can view comprehensive details about an individual transaction event by clicking on the plus symbol for the row of a transaction event on the Transaction Events table.
The Transaction Events Details window displays event details organized into sections with relevant fields grouped under each section based on their role in the transaction. The window displays the following three sections:
- Client: This section focuses on the entity that initiated the transaction, the user’s device or application. Details presented here include information critical for identifying and understanding the source of the request.
- Netskope: This section details the activities and processes executed by the Netskope platform as it mediated, inspected, and enforced policies on the transaction.
- Remote Server: This section provides crucial information about the destination endpoint of the transaction.