Cisco Cisco Email Security Appliance C390 사용자 가이드
Chapter 2 Using Email Security Monitor
Reporting Overview
2-72
Cisco IronPort AsyncOS 7.3 for Email Daily Management Guide
OL-23080-01
Note that in some rare cases where the data has been merged with data from other
sources, the export file does not include timestamps. For example, the Virus
Outbreak Details export merges report data with Threat Operations Center (TOC)
data, making timestamps irrelevant because there are no intervals.
sources, the export file does not include timestamps. For example, the Virus
Outbreak Details export merges report data with Threat Operations Center (TOC)
data, making timestamps irrelevant because there are no intervals.
Keys
Exports also include the report table key(s), even in cases where the keys are not
visible in the report. In cases where a key is shown, the display name shown in the
report is used as the column header. Otherwise, a column header such as “key0,”
“key1,” etc. is shown.
visible in the report. In cases where a key is shown, the display name shown in the
report is used as the column header. Otherwise, a column header such as “key0,”
“key1,” etc. is shown.
Streaming
Most exports stream their data back to the client because the amount of data is
potentially very large. However, some exports return the entire result set rather
than streaming data. This is typically the case when report data is aggregated with
non-report data (e.g. Virus Outbreaks Detail.)
potentially very large. However, some exports return the entire result set rather
than streaming data. This is typically the case when report data is aggregated with
non-report data (e.g. Virus Outbreaks Detail.)
Reporting Overview
Reporting in AsyncOS involves three basic actions:
•
You can create Scheduled Reports to be run on a daily, weekly, or monthly
basis.
basis.
•
You can generate a report immediately (“on-demand” report).
•
You can view archived versions of previously run reports (both scheduled and
on-demand).
on-demand).
Configure scheduled and on-demand reports via the Monitor > Scheduled Reports
page. View archived reports via the Monitor > Archived Reports page.
page. View archived reports via the Monitor > Archived Reports page.
Your IronPort appliance will retain the most recent reports it generates, up to 1000
total versions for all reports. You can define as many recipients for reports as you
want, including zero recipients. If you do not specify an email recipient, the
system will still archive the reports. If you need to send the reports to a large
number of addresses, however, it may be easier to create a mailing list rather than
listing the recipients individually.
total versions for all reports. You can define as many recipients for reports as you
want, including zero recipients. If you do not specify an email recipient, the
system will still archive the reports. If you need to send the reports to a large
number of addresses, however, it may be easier to create a mailing list rather than
listing the recipients individually.