4.11.1 HTML logs
TX1 will store forensic logs in both text and HTML file formats, in the same location
as the forensic image files for a given job. While the core forensic information is the
same between the two formats, HTML allows for styling and organization of the log
data, such as bolding, coloring, and grouping items into collapsible sections. HTML
is the default format for viewing logs on TX1, but this view can easily be switched
back to the legacy text view via the
menu at the bottom of any log details screen.
As shown in the HTML log above, there are plus signs next to the section headers.
This indicates there is additional information available to view in that section. Each
piece of log information was categorized as critical or supplementary, and only the
critical information is shown when a section is collapsed. Expanding any section will
show all the available information. In that expanded view, the critical information is
highlighted with bold field descriptions, while the supplementary information is
shown in light gray. Note that specific pieces of log information may be considered
supplementary in one situation but critical in another. For example, the encryption
information for a given source drive will be considered supplementary if the drive
has no encryption but will become critical if encryption is detected.
The initial state for any HTML log will be to show all fields collapsed with only the
critical information displayed. While individual sections can be toggled between
showing all the information or just a summary (by hitting the + or ‒ symbol next to
the section header, respectively), there is a button at the top right side of the log
details screen that will allow all sections to be expanded or collapsed at one time.
Error messaging in the HTML logs has some unique functionality as well. Any error
conditions will show in red text as critical information in the summarized view.
Expanding the section with an error condition will show more detailed information
on the error status, including the cause of the error.
4.11.2 Sample logs
Two sample logs are shown below: one from a successful duplication and one from
a failed standalone verification. Note that, while the HTML log view (as shown in
the section above) is the default when viewing logs via the TX1 user interface, the
sample logs below are shown in legacy text format as it provides a better view for
showing all the log information at once.
Chapter 4 Using TX1
184
OpenText™ Tableau™ Forensic TX1 Imager
ISTX240300-UGD-EN-1
To Next Page
Loading...
