Cisco Cisco Firepower Management Center 4000

Page of 1844
 
44-5
FireSIGHT System User Guide
 
Chapter 44      Working with Reports
  Generating Reports
The Reports tab page shows all locally stored reports. It shows remotely stored reports as well, if remote 
storage is currently configured. The location of your currently configured report storage appears at the 
bottom of the page, with disk usage for local, NFS, and SMB storage. If you access remote storage using 
SSH, disk usage data is not available. For information on setting up remote storage, see 
Note
If you store remotely and then switch back to local storage, the reports in remote storage do not appear 
on the Reports tab list. Similarly, if you switch from one remote storage location to another, the reports 
in the previous location do not appear in the list. 
Use the following procedure to generate and view reports. Note that users with Administrator access can 
view all reports; other users can view only the reports they generated.
To generate a report from a report template:
Access: 
Admin/Any Security Analyst
Step 1
Select 
Overview > Reporting
.
Step 2
Click the 
Report Templates 
tab.
The Report Templates page appears.
Step 3
Click the generate report icon (
) for the template you want to use.
The Generate Report pop-up dialog appears.
Step 4
Optionally, type a new name in the 
File Name
 field. This sets the name of the generated report file. You 
may also use the input parameter icon (
) to add one or more input parameters to the file name. For 
information on input parameters, see 
Step 5
Select the output format for the report by clicking the corresponding icon: HTML, PDF, or CSV.
Step 6
Optionally, change the global time window by clicking the time window icon (
).
The Events Time Window pop-up window appears. For information on setting the events time window, 
see 
Note
Setting the global time window affects the content of individual report sections only if they are 
configured to inherit the global setting. For information on report section inheritance of the 
global time window, see 
.
Step 7
Type values for any fields that appear in the 
Input Parameters
 section.
Tip
You can ignore user parameters by typing the 
*
 wildcard character in the field. This eliminates the user 
parameter’s constraint on the search.
Step 8
Optionally, if an email relay host is configured in your system policy, click 
Email
 to automate email 
delivery of the report when it generates. For details about email delivery features, see 
.
Step 9
Click 
OK 
and confirm when prompted.
The Report Generation Complete pop-up window appears with a link to view your report.
Step 10
Click either: