ICAP server stores information about each filtered request/response in four possible channels. The following table briefly describes each channel.
- Real Time
- Stores last 10000 monitoring events in memory-only SQLite database for quick access from the Web UI. Primarily designed to give a short overview of what is being browsed through proxy at the moment.
- Stores monitoring events in a database, either SQLite (for home deployments) or MySQL / Maria DB (for enterprise deployments). Traffic reports are built based on this database.
- Access Log
- Stores each monitoring event in a file at /opt/websafety/var/log/access.log. This channel is disabled by default.
- Stores each monitoring event in syslog. Syslog may be configured to gather monitoring events from all ICAP servers in a central log processing system. This channel is disabled by default.