Exa Networks Ltd. Help

SurfProtect Reporting tools

Created: July 23, 2025
Author: Samia
Edited: February 20, 2026

SurfProtect Reporting tools

These tools allow for you to get an overview of the web activity that your SurfProtect service has filtered.

Website Analytics

Website Analytics provides an overview of all web requests made within a queried time period, providing information about when it happened, who did it, what they did and what the filtering decision was. This can be found under the ‘Analytics' section. 

This is broken down into a number of easier-to-digest sections:

Query Options

These options allow you to filter the Analytics results to a more limited set of results.

 

The first three of these options are broad, quick filters which can be applied to the displayed results. By default, the ‘All’ filter is selected, which shows every request that has been filtered. Switching to the ‘Permit’ or ‘Reject’ filters shows only results which have either a Permitted or Rejected status.

The final option, the search icon, allows you to filter results in a much more granular way.

This allows you to filter results down to specific time periods, internal or external IPs, users, etc. The ‘All’, ‘Permit’ and ‘Reject’ options can be enabled, which will limit the results further to these specific statuses.

When these more advanced filters have been set, you can see them listed beneath the activity graph.

Activity Logs

The final section of this page is the Activity logs themselves, which show data about every filtered web request that has been handled by your SurfProtect service. These logs are split into four tabs of data:


Activities: This is the most granular set of logs, showing every request in the order it happened during the queried time period, limited to the query filters set by the user.

Unique activities: This is an alternative view of the Activities logs. In this view, you can see all of the unique activities, how many times each has happened, when it first occurred and when it last occurred within the queried time period. Some information is not shown here, like usernames, as this view is focused on the number of occurrences rather than the specific logs.

Searches: This is a view of all the requests seen by the filtering where an identifiable search query was found, again limited to the queried time period and query filters.

Unique searches: This is an alternative view of Search logs. In this view, you can see all of the unique searches which were performed, how many times each has happened, when it first occurred and when it last occurred within the queried time period. Some information is not shown here, like usernames, as this view is focused on the number of occurrences rather than the specific logs.

Real-time Alerts

SurfProtect Real-time Alerts is a monitoring system that looks for specific types of behaviour when users are web browsing. When a set of requests within a given timeframe is identified as something that should be reported upon, an incident is created with those requests as events within it.

The interface on the panel allows a user to view and manage these incidents as they are reported.

Reports

When viewing the SurfProtect panel, if the user has been granted access to view Real-time Alerts, a menu option will be visible under the Reporting area (as shown in the image). From this menu, users can view and/or manage three different aspects of Real-time Alerts: Incidents, Contacts and History

To set up RTAs, please follow this guide