Cisco Cisco FirePOWER Appliance 8130
44-8
FireSIGHT System User Guide
Chapter 44 Working with Reports
Using Report Templates
Using Report Templates
License:
Any
You can build a new report template in any of the following ways:
•
•
•
•
After you have populated your template with sections, you can edit the document attributes and section
attributes as necessary. For information, see:
attributes as necessary. For information, see:
•
•
The key to successful reports is defining the searches that populate the report’s sections. For information
on defining these searches, see
on defining these searches, see
.
Search or Filter
Presents a drop-down menu of searches or application filters.
For most tables, you can constrain a report using a predefined or saved
Search
. You
can also create a new search by clicking the edit icon (
); see
.
For the Application Statistics table, you use a user-defined application
Filter
to
constrain a report; for information on creating filters, see
.
X-Axis
Presents a drop-down menu of available data columns for the X-axis of the selected
chart. Appears only when you select a chart format. For line charts, the X-axis value
is always
chart. Appears only when you select a chart format. For line charts, the X-axis value
is always
Time
. For bar and pie charts, you cannot select
Time
as the X-axis value.
Y-Axis
Presents a drop-down menu of available data columns for the Y-axis of the selected
chart.
chart.
Section
Description
Description
Defines the descriptive text that precedes the search data in the section. Enter a
combination of text and input parameters. Default for a new section is the following
set of two input parameters: $<Time Window> and $<Constraints>.
combination of text and input parameters. Default for a new section is the following
set of two input parameters: $<Time Window> and $<Constraints>.
For more information on input parameters, see
.
Time Window
Defines the time window for the data that appears in the section. If the section
searches time-based tables, you can select the check box to inherit the report’s
global time window. Alternatively, you can set a specific time window for the
section. For information about setting the time window, see
searches time-based tables, you can select the check box to inherit the report’s
global time window. Alternatively, you can set a specific time window for the
section. For information about setting the time window, see
.
Results
Select either
Top
or
Bottom
and enter the maximum number of records to be included
in the section.
Color
Defines the colors for graphed data in the section. Select one or more colors, as
applicable.
applicable.
Table 44-3
Report Section Fields (continued)
Field Name
Definition