The Access Event Archives link on the Events page opens a table of daily archives for App Control events. These events are archived in CSV files.

You can open or download any day’s event archive by clicking the CSV file name and selecting an action from the dialog box. These archives are located in the archivelogs subdirectory under your Carbon Black App Control Server installation directory.

To return to the Events page, click Reports > Events in the console menu.

Note:
  • Archiving can be enabled or disabled on the Events tab of the System Configuration page. See Managing the App Control Event Database.
  • Unlike event times shown in the console, timestamps for the archived events listed in the CSV files are shown in UTC time.