Cisco Cisco Firepower Management Center 4000
44-22
FireSIGHT System User Guide
Chapter 44 Working with Reports
Using Report Templates
An input parameter’s type determines the search fields where you can use it. You can use a given type
only in appropriate fields, as described in the
only in appropriate fields, as described in the
table. For example,
a user parameter you define as a string type is available for insertion in text fields but not in fields that
take an IP address.
take an IP address.
To create user-defined input parameters for a report template:
Access:
Admin/Any Security Analyst
Step 1
Select
Overview > Reporting
.
Step 2
Select the
Report Templates
tab.
The Report Templates page appears.
Step 3
Click the edit icon (
) for the template you want to edit.
The Report Sections page appears.
Step 4
Click
Advanced
.
The Advanced Settings pop-up window appears.
Step 5
Click the Add Input Parameter icon (
).
The Add Input Parameter pop-up window appears.
Step 6
Type the parameter name in the
Name
field and use the
Type
drop-down menu to select the type, then click
OK
.
The new parameter appears in the
Input Parameters
menu.
Step 7
Repeat the steps above until you have defined all the parameters you need.
Step 8
Click
OK
.
Your new input parameters are saved for this template and the Report Sections page reappears.
If you reuse a report template, you can change the name and type for any input parameters to better
reflect the purpose of the new report.
reflect the purpose of the new report.
Table 44-6
User-Defined Input Parameter Types
Use this parameter type...
With fields with this data...
Network/IP
any IP address or network segment in CIDR format
Application
name of an application protocol, client application, or web
application
application
Event Message
any event view message
Device
3D appliance (Defense Center or FireSIGHT System managed
device)
device)
Username
user identification such as initiator user and responder user
Number (VLAN ID, Snort ID,
Vuln ID)
Vuln ID)
any VLAN ID, Snort ID, or vulnerability ID
String
text fields such as application or OS version, notes, or descriptions