Cisco Cisco Firepower Management Center 4000
44-4
FireSIGHT System User Guide
Chapter 44 Working with Reports
Generating Reports
Step 2
Select
Overview > Reporting
.
Step 3
Click the
Report Templates
tab.
The Report Templates page appears.
Step 4
Click
Create Report Template
.
The Report Sections page appears.
Step 5
Type a name for your new report template in the
Report Title
field.
Step 6
Click
Save
to save the report template under the new name.
The report template is saved and an entry for the report template appears on the Report Templates page.
Step 7
Click the import sections from dashboard, summaries and workflows icon (
).
The Import Report Sections pop-up window appears. You can choose any of the data sources described
in the
in the
table.
Step 8
Select a dashboard, workflow or summary from the drop-down menus.
Step 9
For the data sources you want to add, click
Import
.
The Report Sections page for your template reappears with a section for each element of the selected
data source. For dashboards, each widget graphic will have its own section; for workflows, each event
view will have its own section.
data source. For dashboards, each widget graphic will have its own section; for workflows, each event
view will have its own section.
Step 10
Make changes to the content of your sections as needed.
For information on editing a report template, see
.
Note
The last report section in some workflows contains detail views that show packets, host profiles,
or vulnerabilities, depending on the workflow. Retrieving large numbers of events with these
detail views when generating your report may affect performance of the Defense Center.
or vulnerabilities, depending on the workflow. Retrieving large numbers of events with these
detail views when generating your report may affect performance of the Defense Center.
Step 11
When the report template is correct, click
Save
.
The report template is saved and an entry for the report template appears on the Report Templates page.
Generating Reports from a Report Template
License:
Any
After you define your report template, you are ready to generate the report itself. The generation process
lets you select the report’s format (HTML, PDF, or CSV). You can also adjust the report’s global time
window, which applies a consistent time frame to all sections except those you exempt. For information
on setting the report time window, see
lets you select the report’s format (HTML, PDF, or CSV). You can also adjust the report’s global time
window, which applies a consistent time frame to all sections except those you exempt. For information
on setting the report time window, see
If the report template includes user input parameters in its search specification, the generation process
prompts you to enter values, which tailor this run of the report to a subset of the data. For information
on input parameters, see
prompts you to enter values, which tailor this run of the report to a subset of the data. For information
on input parameters, see
The Reports tab lists all previously generated reports, with report name, date and time of generation,
generating user, and whether the report is stored locally or remotely. A status column indicates whether
the report is already generated, is in the generation queue (for example, for scheduled tasks), or failed
to generate (for example, due to lack of disk space).
generating user, and whether the report is stored locally or remotely. A status column indicates whether
the report is already generated, is in the generation queue (for example, for scheduled tasks), or failed
to generate (for example, due to lack of disk space).