• Configuration ‒ Job configuration information, such as the output file format
type, segment size, and whether or not compression was enabled. If logical
image searches are used, the specific search criteria is listed in this section.
• Image Destination ‒ Destination drive details, including readback verification
hash values (if enabled for the job), overall drive information (interface type,
make/model number, firmware version, serial number, HPA/DCO/AMA related
information, RAID and encryption information, size/layout information, and the
partition table type), partition details, and filesystem specific information.
• Failure Summary ‒ If a failure occurred during the job, this section will be
shown and will include a failure reason and code. Note that the failure code is
not intended to be meaningful to the end user. In cases where customer support
is required to resolve a job failure situation, the failure code should be noted and
included in the incident report. This information is helpful to the support team
and will help in determining the root cause of the failure.
To access the Logs module, tap the side navigation menu icon in the upper left
corner, then tap Logs.
The Log List displays a summary of each log, including the job type, log creation
date and time (essentially the job start time), and the status of the job (Started, Ok,
Paused, Cancelled).
To export all logs, tap the Export All Logs button on the bottom of the Log List
screen. Then select a drive with a recognized file system to which to export the logs.
Note that logs can be exported to any writable media connected to TX1, including
those physically connected to the front USB accessory ports or the right-side
destination ports, and any network based media (iSCSI target or CIFS shares) that
was mounted as a destination.
To delete all the logs stored on this TX1 for previously completed (inactive) jobs, tap
the Delete Inactive button on the bottom of the Log List screen. When completed,
the only logs remaining on the TX1 will be for any jobs that were active when the
delete action was initiated.
Note: Resuming a paused job requires the original job log to be present. If
there are any paused jobs in the Recent jobs list and the log for that job is
deleted while it is paused, the job will not be resumable and will need to be
started over.
Tap on a job row to view the detailed forensic log for that job.
Chapter 4 Using TX1
182
OpenText™ Tableau™ Forensic TX1 Imager
ISTX240300-UGD-EN-1
To Next Page
Loading...
