Cisco Cisco FirePOWER Appliance 8250
44-14
FireSIGHT System User Guide
Chapter 44 Working with Reports
Using Report Templates
Step 1
Select
Overview > Reporting
.
Step 2
Click the
Report Templates
tab.
The Report Templates page appears.
Step 3
Click
Edit
for the report template you want to use to generate the report.
The Report Sections page for your template appears.
Step 4
Click
Advanced
.
The Advanced Settings pop-up window appears.
Step 5
For documents in PDF or HTML format, perform the tasks described in
If you selected CSV as your document format, you have no document attributes to set.
Editing the Sections of a Report Template
License:
Any
You can modify a variety of report section attributes to adjust the content of the section and its data
presentation. For information, see the following sections:
presentation. For information, see the following sections:
•
•
•
•
•
•
•
•
Note
Security Analysts can edit only report templates they created.
Setting the Table and Data Format for a Template Section
License:
Any
Each section in a report template queries a database table to generate content for that section. Changing
the section’s data format uses the same data query, but modifies the fields that appear in the section
according to the analytical purpose of the format type. For example, the table view of intrusion events
populates the section with a large number of data fields per event record, while a pie chart section shows
the portion of all matching records that each selected attribute represents, with no details about
individual events. Bar chart sections compare the total counts of matching records that have specific
attributes. Line charts summarize changes in the matching records over time with respect to a single
attribute. Line charts are available only for data that is time-based, not for information about hosts, users,
third-party vulnerabilities, and so on.
the section’s data format uses the same data query, but modifies the fields that appear in the section
according to the analytical purpose of the format type. For example, the table view of intrusion events
populates the section with a large number of data fields per event record, while a pie chart section shows
the portion of all matching records that each selected attribute represents, with no details about
individual events. Bar chart sections compare the total counts of matching records that have specific
attributes. Line charts summarize changes in the matching records over time with respect to a single
attribute. Line charts are available only for data that is time-based, not for information about hosts, users,
third-party vulnerabilities, and so on.
For information on the different available formats, see the
table.