How do you open web usage monitoring?

Open the view from the application menu: Menu -> Monitoring -> Web. It is designed for analysing website use on monitored computers. In one place it shows domains, URLs, page titles, window titles, browsers, estimated foreground time, page opens, recognised categories, productivity category and the confidence level of identification.

Use this view when you want to check which sites users focus on, whether web activity is spread across many domains, whether a few services dominate, or whether one browser generates most of the data. Web usage monitoring is also useful when you analyse productivity, security, application usage or website blocking and need normal browsing context, not only violation events.

The layout consists of the Analytics panel, the daily records table and the details section. The panel shows metrics, rankings, trends, comparisons, anomalies, hourly presence and data quality; its interpretation is described below. Each table row represents one day of data from one device. Clicking that row opens the day's description for the selected workstation and employee, aggregated by domains, URLs, page titles, browsers and recognised categories.

Daily table in web monitoring on a computer

The table is a quick overview of what happened on a specific computer during a given day. Instead of opening the full item list immediately, you can check how many domains were recognised, how many pages were opened, what the estimated browser activity time was and which domain or browser appeared most often in the record.

The basic columns include:

  • Domain Count - how many different domains the daily record sees.
  • Page Opens - entries or reopenings saved in browser activity data.
  • Estimated Foreground Time - approximate time when a page was associated with the active window.
  • Most Visited Domain - the domain with the largest share of activity.
  • Most Used Browser - the browser most visible in that day's data.

After expanding the table, you can analyse Last Domain, Last Page Title, Last Browser, Last Window Title, Last Confidence Percent and Last Category. Search covers the computer name, Windows user, active hours, domains, browsers, page titles, window titles, categories and items stored in JSON details.

Analytics panel in web usage monitoring

The analytics panel gathers data from the selected range and lets you switch analysis between day, week, month and a custom period. Total shows the full activity scale, while Daily Average helps compare periods of different lengths without artificially favouring the longer range.

The main panel metrics are:

  • Estimated Foreground Time - total or average time of page activity in the active window.
  • Unique domains - the number of different domains visible in the analysed period.
  • Browsers - the number of recognised browsers used for web activity.
  • Recognized categories - the number of categories assigned to pages.
  • Category Coverage - the share of activity for which the system could indicate a category.
  • Average Confidence - the average confidence level of web data recognition.
  • Computers and Employees - the scope of devices and people included in the analysis.

In practice, do not judge time without domain context. A long duration on one domain may mean work in an online tool, while shorter time scattered across many services can indicate attention switching. That is why web usage monitoring reads best together with rankings and record details.

Domain rankings in website monitoring

Rankings help you move from a general number of minutes to specific places on the web. By default, the panel shows Most used domains, because a domain is usually the clearest analysis level: less broad than a category and less granular than a full URL.

In the panel you can switch between:

  • Most used domains - domains with the highest estimated foreground time.
  • Top URLs - specific page addresses, useful for checking repeated views or subpages.
  • Top page titles - titles saved by the browser, often more readable than the address itself.
  • Top window titles - application window titles that help recognise work context.
  • Browsers - distribution of activity between browsers in use.
  • Recognized categories - the share of activity assigned to page types.
  • Computers and Employees - devices and people with the largest share of web activity.

If a domain has a high share, open the daily record details and check which page titles and URLs build that result. In website analysis, one domain can contain both a work tool and sections less related to duties, so the ranking is the start of interpretation, not a final verdict.

Activity trends in web monitoring

Trends show how internet use changes day by day. You can observe Estimated Foreground Time, Unique domains, Browsers, Recognized categories, Category Coverage, Average Confidence, Computers and Employees. Each line helps you see whether a change is a one-off event or grows across several days.

When reading trends, pay attention to:

  • a sudden time increase with a stable number of domains, which may point to longer work in one service,
  • more domains without more time, when the user switches between websites more often,
  • a drop in category coverage, which makes it harder to assess the type of visited pages,
  • a change in average confidence, especially after a browser or agent update,
  • differences between computers when only some workstations begin producing an unusual pattern.

The Hourly Web Presence chart shows the percentage of monitored days on which the agent noticed web activity during a specific local hour. It is not a number of minutes or page opens. A marked hour means that at least one trace of website usage appeared during that time of day.

Comparisons in internet usage monitoring

In comparisons, the current date range is placed next to a reference range. This lets you see whether web usage monitoring shows a real behavioural change or only a natural difference between working days. This mode is especially useful after a change in work rules, a new online tool rollout or a security incident review.

The most informative metric changes are:

  • Estimated Foreground Time - shows whether web activity increased or decreased in time.
  • Unique domains - indicates whether users visit a wider set of sites.
  • Browsers - helps detect a change in the tool used for browsing.
  • Recognized categories - shows whether the system classifies more page types.
  • Category Coverage and Average Confidence - indicate whether the data is good enough to interpret.

If the time increase comes with the same domains, inspect specific page titles. If the number of unique domains grows, start with domain and employee rankings. Comparison should not be used for simple user judgement; its value is showing where it is worth going deeper.

Anomalies in website monitoring

Anomalies look for changes that stand out from the comparison period. In this view, the system focuses on a significant increase in estimated web foreground activity and on new domains that immediately gained a high usage share. This means you do not have to manually review every ranking after changing the date range.

The panel may indicate, among others:

  • Estimated web foreground time increased significantly - when the current range exceeds the baseline by configured time and percentage thresholds.
  • New domain has a high usage share - when a domain was not visible in the previous period and takes a meaningful share of current activity.

In anomaly evidence, check Current Estimated Foreground Time, Baseline Estimated Foreground Time, usage share, domain name, record date, computer and employee. In web monitoring, a single anomaly does not have to mean a problem; it may also come from a new company tool, online training or work in a browser-based system.

Record details in visited website monitoring

After clicking a record, the application shows a list of items from one day and one computer. Details are aggregated so it is easier to see which domains, URLs and page titles had the largest share of web activity. The default sort starts with Estimated Foreground Time, so the most important positions for that day usually appear at the top.

The details show, among other things:

  • page identification through Domain, Page Title, Window Title and URL.
  • browsing information: Browser and Active Hours.
  • time with proportion: Estimated Foreground Time and Share of web activity.
  • classification context: Recognized category, Productivity Category and Confidence.
  • observation boundaries: First Seen and Last Seen.
  • the helper counter Page Opens.

Filtering and sorting let you quickly narrow the view to one domain, browser or category. Remember, however, that details are not a full record of every network request. They are a daily aggregation of browser activity prepared for analysing work and internet usage patterns.

Data quality in web usage monitoring

The data quality section tells you whether daily records have consistent details and whether the panel can be interpreted safely. For website monitoring this matters a lot, because missing details can hide domains, page titles, browsers or categories even when the summary still shows time or page open counts.

Quality messages can warn, for example, about an empty item list despite existing counters, invalid JSON format, timestamps leaving the record's day boundaries, disagreement between the summary and items, ongoing closure of the current day or a historical entry with no detailed data.

When the warning refers to today's data, first allow aggregation to finish calmly. For older dates, check the agent state, Browser Insight operation, ItemsJson completeness and consistency between Domain Count, Page Opens, observations and Estimated Foreground Time in the details table. Only then evaluate rankings and anomalies.

Web monitoring settings

The data visible in this view depends mainly on web settings in Monitoring Profiles. The most important editable option is Browser Insight, which lets the agent collect website usage context: domains, URLs, page titles, window titles, browser names, categories and recognition confidence.

The second important option is Browser Insight Interval (seconds). A shorter interval gives a denser picture of changes in the active window, while a longer one reduces read frequency. When setting the value, keep a balance: web usage monitoring should show useful work patterns, not create too much data to interpret.

The same profile section also contains Web Upload Transfer Monitoring. This option matters for file transfers, but it does not replace Browser Insight in the Web view. After changing settings, return to the page after the next working day and check whether Unique domains increase, whether Category Coverage improves and whether record details contain domains, page titles and browsers.