OpenText Tableau Forensic TX1 Imager
The Information Company 157
4.10.1 HTML logs
TX1 will store forensic logs in both text and HTML file formats, in the same location as
the forensic image files for a given job. While the core forensic information is the same
between the two formats, HTML allows for styling and organization of the log data, such
as bolding, coloring, and grouping items into collapsible sections. HTML is the default
format for viewing logs on TX1, but this view can easily be switched back to the legacy
text view via the menu at the bottom of any log details screen.
As shown in the HTML log above, there are plus signs next to the section headers. This
indicates there is additional information available to view in that section. Each piece of log
information was categorized as critical or supplementary, and only the critical information
is shown when a section is collapsed. Expanding any section will show all the available
information. In that expanded view, the critical information is highlighted with bold field
descriptions, while the supplementary information is shown in light gray. Note that
specific pieces of log information may be considered supplementary in one situation but
critical in another. For example, the encryption information for a given source drive will be
considered supplementary if the drive has no encryption but will become critical if
encryption is detected.
The initial state for any HTML log will be to show all fields collapsed with only the critical
information displayed. While individual sections can be toggled between showing all the
information or just a summary (by hitting the + or – symbol next to the section header,
respectively), there is a button at the top right side of the log details screen that will allow
all sections to be expanded or collapsed at one time.
Error messaging in the HTML logs has some unique functionality as well. Any error
conditions will show in red text as critical information in the summarized view. Expanding
the section with an error condition will show more detailed information on the error status,
including the cause of the error.
4.10.2 Sample logs
Two sample logs are shown below: one from a successful duplication and one from a
failed standalone verification. Note that, while the HTML log view (as shown in the
section above) is the default when viewing logs via the TX1 user interface, the sample
logs below are shown in legacy text format as it provides a better view for showing all the
log information at once.
Copyright © 2022 Open Text. All rights reserved. Trademarks owned by Open Text.
To Next Page
Loading...