Collect Ahnreport/Artifact

Check Ahnreport information and Artifact data collection status - Collecting or Completed.

From Collect Ahnreport/Artifact, you can:

Collect Ahnreport/Artifact
Check the AhnReport/Artifact status (Collecting, Failed or Completed)
Download AhnReport/Artifact file

Note

Select the period - Last 24 hours, Last 48 hours, Last 7 days, Last 14 days, Last 30 days or User-defined - on the top right. In User-defined, click the calendar icon ( ) to specify the date and clock icon to specify the time.

Type	Artifact	AhnReport
Information	Traces left by applications or the operating system e.g.) Logs, history, registry	AhnLab product installation and error
Max. File Size	500KB	MB or GB
Collected from	EDR Agent	EPP Agent
Collected when	Collect Artifact command is sent	Collect Ahnreport command is sent or there is a product error
File Name	EAC_xxx.arc	ARP_xxx.arc

Collect Ahnreport

The file size is in the unit of MB or GB, and Ahnreport is collected from the EPP Agent when the command is sent or when there is a product error. The information collected include file, registry, system, network, hardware, installed program and timeline information.

Collect Artifact

The traces left by applications or the operating system are collected - logs, history, timeline and registry information. Artifact is collected from the EDR Agent (not from individual agents, but from the agent group) and the maximum file size is 500KB. V3's ASD engine (ASD Engine 2.0) looks for and collects the Artifact data in Artifact Information.

Check Collected Ahnreport/Artifact

Check the details on the Ahnreport/Artifact list as below:

Click Response on the top.
Click the Collect Ahnreport/Artifact tab.
Check the Ahnreport/Artifact information.

Total: The total number of collected Ahnreport/Artifact and each collected Ahnreport/Artifact. e.g.) Total 3 (AhnReport: 3 Artifact: 0)
Download (): Download the collected Ahnreport or Artifact file. Select the file to download and click Download (), or Download on the top.
Delete (): Delete the selected Ahnreport or Artifact file. Select the file to delete and click Delete () or Delete on the top.
Status: The response command status - Collecting, Failed or Completed.
Type: Ahnreport or Artifact.
IP Address: The agent's IP address from which Ahnreport or Artifact was collected.
File Size (bytes): The Ahnreport or Artifact file size.
Administrator Account: The administrator that sent the command to collect Ahnreport or Artifact.
Collection Time: The time the Ahnreport or Artifact collection command was sent.

Search for Ahnreport/Artifact

Search for Ahnreport/Artifact as below:

Click Response on the top.
Click the Collect Ahnreport/Artifact tab.
Select a search condition or enter a search keyword.

Click Search ( ).
To check the Ahnreport/Artifact by period, specify the period on the right.

Check the result on the list.