How-to include clipboard content in the activity logs

Products

• Web Isolation

Issue/Introduction

How to include Web Isolation users' copied and pasted content in the activity log records

Resolution

In "Profile -> Activity Log Profiles" "Primary logging configuration" or desired activity log profile, make sure that "Clipboard events" has "Copied content" and "Pasted content" checked:

• 

And that the transactions that require to be logged are matching policy rules where t above activity log profile is set:

• 

 

* * * Be aware that collecting users' clipboard data may expose their private information * * *

 

Referring to Web Isolation admin manual "ArcSight CEF Mapping" chapter, the related common event format (CEF) field is "cat":

•