Cisco Cisco Firepower Management Center 4000

Page of 1844
 
44-22
FireSIGHT System User Guide
 
Chapter 44      Working with Reports 
  Using Report Templates
An input parameter’s type determines the search fields where you can use it. You can use a given type 
only in appropriate fields, as described in the 
 table. For example, 
a user parameter you define as a string type is available for insertion in text fields but not in fields that 
take an IP address. 
To create user-defined input parameters for a report template:
Access: 
Admin/Any Security Analyst
Step 1
Select 
Overview > Reporting
.
Step 2
Select the 
Report Templates
 tab.
The Report Templates page appears.
Step 3
Click the edit icon (
) for the template you want to edit.
The Report Sections page appears.
Step 4
Click 
Advanced
.
The Advanced Settings pop-up window appears.
Step 5
Click the Add Input Parameter icon (
).
The Add Input Parameter pop-up window appears.
Step 6
Type the parameter name in the 
Name
 field and use the 
Type
 drop-down menu to select the type, then click 
OK
.
The new parameter appears in the 
Input Parameters
 menu.
Step 7
Repeat the steps above until you have defined all the parameters you need.
Step 8
Click 
OK
.
Your new input parameters are saved for this template and the Report Sections page reappears.
If you reuse a report template, you can change the name and type for any input parameters to better 
reflect the purpose of the new report.
Table 44-6
User-Defined Input Parameter Types 
Use this parameter type...
With fields with this data...
Network/IP
any IP address or network segment in CIDR format
Application
name of an application protocol, client application, or web 
application
Event Message
any event view message
Device
3D appliance (Defense Center or FireSIGHT System managed 
device)
Username
user identification such as initiator user and responder user
Number (VLAN ID, Snort ID, 
Vuln ID)
any VLAN ID, Snort ID, or vulnerability ID
String
text fields such as application or OS version, notes, or descriptions