Cisco Cisco Firepower Management Center 4000
44-7
FireSIGHT System User Guide
Chapter 44 Working with Reports
Understanding Report Templates
Your reports contain one or more information sections. You choose the format (text, table, or chart) for
each section individually. The format you select for a section may constrain the data that can be included.
For example, you cannot show time-based information in certain tables using a pie chart format. You can
change the data criteria or format of a section at any time to obtain optimum presentation.
each section individually. The format you select for a section may constrain the data that can be included.
For example, you cannot show time-based information in certain tables using a pie chart format. You can
change the data criteria or format of a section at any time to obtain optimum presentation.
You can base a report’s initial design on a predefined event view, or you can start your design by
importing content from any defined dashboard, workflow, or summary. You can also start with an empty
template shell, adding sections and defining their attributes one by one.
importing content from any defined dashboard, workflow, or summary. You can also start with an empty
template shell, adding sections and defining their attributes one by one.
All sections in a report template have a title bar and various attribute fields that control the section’s
contents and appearance. For more information, see the following:
contents and appearance. For more information, see the following:
•
the
table
•
the
table
The following table describes the controls on the title bar for each template section.
The following table defines the fields in each section of a report template.
Table 44-2
Report Section Title Bar Elements
Attribute
Definition
title bar name
Contains the name of the section as it appears in the report. Change it by clicking it
and typing a new name.
and typing a new name.
title bar icons
Click the duplicate icon (
) to add a duplicate of the section to the report template.
Click the minimize icon (
) to minimize the section.
Click the delete icon (
) to delete the section, after confirmation.
Table 44-3
Report Section Fields
Field Name
Definition
Table
Presents a drop-down menu that allows you to select the table from which the
section data is extracted.
section data is extracted.
Preset
Presents a drop-down menu of predefined searches. You can select an appropriate
preset to initialize the search criteria when you define a new search.
preset to initialize the search criteria when you define a new search.
Format
Presents icons that allow you to select the format of the section data. Options
include:
include:
Bar chart: Compares quantities of the selected variables.
Line chart: Shows trends/changes over time of a selected variable. Available
only for time-based tables.
Pie chart: Shows each selected variable as a percentage of the whole. Variables
with quantities of zero are dropped from the chart. Very small quantities are
clustered into a category labeled
clustered into a category labeled
Other
.
Table view: Shows values of attributes for each record. Not available for
summary or statistical data.
Detail view: Shows complex object data associated with certain events, such as
packets (for intrusion events) and host profiles (for host events). Format is available
only for certain event types that involve such objects. Output may degrade
performance if large numbers are requested.
only for certain event types that involve such objects. Output may degrade
performance if large numbers are requested.