ARTICA v4 · 2020. 5. 15. · Artica Proxy statistics allows you to display Internet usage for...

Artica v4.x : http://articatech.net | contact: [email protected] | support: http://bugs.articatech.com

ARTICA v4 Proxy Statistics rev2

Version 4.29.051517


TABLE OF CONTENT

Statistics feature ................................................................................................................................ 3 Multiple Artica servers ................................................................................................................................................................................... 3

Artica Statistics communicator ............................................................................................................................................ 3 Installing Artica Statistics Communicator. .............................................................................................................................................. 3 Statistics communicator status. .................................................................................................................................................................. 4 PDF Reports ....................................................................................................................................................................................................... 5

Connecting remote Artica servers ............................................................................................... 7

Graph/Charts/Statistics ................................................................................................................... 8

Dashboard ..................................................................................................................................................................................... 8 Query the data. ........................................................................................................................................................................... 9 Browse statistics. ..................................................................................................................................................................... 10

Dedicated statistics account. ....................................................................................................... 11

Assign statistics privilege ..................................................................................................................................................... 11

FAQ ....................................................................................................................................................... 13 Why did I have no usernames in statistics for specific Websites ?................................................................................................. 13 Why MAC addresses are still 00:00:00:00:00 ? .................................................................................................................................... 13


Statistics feature Artica Proxy statistics allows you to display Internet usage for flows that pass through the Artica Proxy. According performance tweaks, the statistics database can be stored on a dedicated server. It can be query for each local proxy but centralized.

Multiple Artica servers Each Proxy service sends Realtime events using syslog the final syslog service that receive events from other proxies is able to send events to Artica statistics communicator.

ARTICA STATISTICS COMMUNICATOR Artica Statistics communicator is a daemon that receive events through the 1899 local port and compress them in order to provide statistics each 10 minutes. In order to reduce the number of events saved to the PostgreSQL database, statistics are compressed each 10 minutes and only by domain name. This feature is not designed to store URLS. If you need to store URLs, you have to switch to ElasticSearch database method. This means, during 10 minutes, Artica Statistics communicator stores events in memory. If you restart the server or restart the service you will lose the current 10 minutes Time zones are respected, the proxy send events with the time configured locally, Artica Statistics Communicator parse the sent time and did not use the time of the current server.

Installing Artica Statistics Communicator. Statistics feature is compatible when using only one server but you have to take care about the performance. In this way, the server is in charge to build statistics and provide Internet access.

On the left menu, click on “System”/ “Features”

On the Search field, type “Artica Statistics”, click on “Install” button.


Statistics communicator status. On the left menu, click on “Statistics” and “Artica Statistics communicator”

The status represents received data during last 10 minutes. The picture represents this information: During 10 minutes 177 websites have generated 2 198 requests from 37 users and the bandwidth usage was 379MB.


PDF Reports You can schedule PDF reports that can be sent by eMail to a specific email addresses.

Click on “PDF reports” tab.

SMTP settings Click on SMTP parameters button

Set the address of your SMTP relay server in “Mail server name” field Set the listen port of your SMTP relay in “SMTP server port” If you relay use TLS/SSL, turn on the “Enable TLS support” Set the email identity of the sender in “sender mail address” Set a default eMail address in “Your email address (Default)” ( this eMail is used if no email has been set

in reports) If your SMTP server require authentication, set credentials in Username AUTH and Password AUTH

When submitting the form, Artica will send a test email to the default email address automatically


Schedule a PDF report

Click on new task to schedule a report that will be sent by SMTP

Task Type: You can choose which report you want to send :

o Yesterday’s report : Build a daily report for the last 24 Hours when the task will be executed. o Daily report: Build a daily report for the current day when the task is executed. o No Categorized: Build CSV file of all sites not categorized.

Schedule: define the time and days when the report will be generated. Description: set the description of the report, this description will be displayed on after the report title. Recipients: You can add several email addresses by separate them with a comma. Subject: Set the subject of the message with the attached report.

The subject will be the title of the report too.


Connecting remote Artica servers The main benefit of Artica Statistics Communicator is to centralize statistics across multiple Artica proxies. After installing the Artica Statistics Communicator, you can connect any Artica proxy to it in order to inject and centralize Internet access statistics

Artica servers clients did not need to have the Statistics Communicator service installed On a remote Artica server, on the left menu click on “Your Proxy” / “Statistics service”

.

Turn on the “Enable the feature” Set the IP address of the remote server that have Statistic Communicator service installed on the Remote Syslog server address. Your Artica server client will send pre-formatted logs by syslog to the Artica Statistics Communicator, set the Listen port ( by default 514 UDP ) in the listen port field. If you have decided to use TCP on the remote statistics Artica server, turn on the Enable TCP/IP sockets option If you use SSL over TCP on the remote Statistics Artica server, turn on the use SSL option and select the imported certificate from the certificated center in the Certificate dropdown list.


On the Artica server that handle statistics, go into “Artica Statistics Communicator” left menu Choose “Entities” tab. You should see after few minutes the remote Artica server .

This means statistics of the remote server are received and analyzed.

Graph/Charts/Statistics When installing stats communicator, you have several ways to display statistics.

DASHBOARD The main Dashboard provide a new tab called “Bandwidth (Your proxy)” It displays bandwidth statistics passed trough the HTTP proxy only. You can see total flow downloaded from the current hour, day, week and month.


QUERY THE DATA. Query the data displays a table of stored events and allows you to query data. Extracted data can be downloaded using a CSV file. On the left menu, choose “Statistics” and “Artica statistics Communicator” Click on the data tab.

Use the “Build Query” to extract relevant data by define the date range, user or website. After build the query you can click on “statscom.csv” in order to extract table in CSV format. Each link on the table allows you to extract specific statistics


BROWSE STATISTICS. The left menu “Stats Browser” expose data in a different way, it displays the top users ,sites, categories of a defined period. In this case, you can navigate under the TOP items in order to zoom on the relevant data you need to see.

For example, by clicking a website, we will see the flow generated by this website and the TOP of users that have requested this website.


Dedicated statistics account. Depends on your server connection, you can assign a Statistics privileges of a designed user’s group. Artica allows Active Directory and LDAP connections ( see Artica main documentation) This section will be focused on using Admins Group.

ASSIGN STATISTICS PRIVILEGE

Click on the TOP right menu

Choose “Local Admins”

Click on New group. Add the group name “Statistics”


Select the new created group and click on the “Privileges” tab. Turn on only the “Can View all Web statistics (proxy & URL filtering” Click on Apply button

Choose the tab “Members” Click on the button “New Member” in order to create a new statistics account

Logoff from the Artica Web sonsole.


Login on the Artica Web console with the new created user.

You will have access to the Web console only for display statistics.

FAQ

Why did I have no usernames in statistics for specific Websites ? Because the Proxy administrator have “whitelisted” using ACLs some websites. When a website is allowed in ACLs or using the default Artica whitelisting the proxy did not ask authentication. If the authentication is not requested, then the login username is not added in statistics and proxy events.

Why MAC addresses are still 00:00:00:00:00 ? MAC Addresses are based on the ARP protocol. This protocol is only seen in when computers using a switch in the same network. If you install the proxy in a different network, then the ARP is not forwarded and the MAC address will be unknown.

ARTICA v4 · 2020. 5. 15. · Artica Proxy statistics allows you to display Internet usage for...

Documents

Transcript of ARTICA v4 · 2020. 5. 15. · Artica Proxy statistics allows you to display Internet usage for...