Cisco Cisco Firepower Management Center 4000

Click 

 to save the search criteria. The search is saved (and associated with your 

user account if you selected 

) so that you can run it at a later time.

Protection

The clipboard is a holding area where you can copy intrusion events from any of the intrusion event 
views. For information on how to add events to the clipboard, see 

The contents of the clipboard are sorted by the date and time that the events were generated. After you 
add intrusion events to the clipboard, you can delete them from the clipboard as well as generate reports 
on the contents of the clipboard.

You can also add intrusion events from the clipboard to incidents, which are compilations of events that 
you suspect are involved in a possible violation of your security policies. For more information about 
adding events from the clipboard to an incident, see 

.

See the following sections for more information:

Protection

You can generate a report for the events on the clipboard just as you would from any of the event views.

Admin/Intrusion Admin

Add one or more events to the clipboard:

For information on how to add events to the clipboard from a drill-down page or table view of events, 
see 

For information on how to add events to the clipboard from the packet view, see 

.

Select 

.

The clipboard appears. 

You have the following options:

To include specific events from a page on the clipboard, navigate to that page, select the check box 
next to the events, and click 

.

To include all the events from the clipboard, click 

.

In either case, the Report Templates page appears.

Specify how you want your report to look, then click 

.