Cisco Cisco Firepower Management Center 2000
44-2
FireSIGHT System User Guide
Chapter 44 Working with Reports
Generating Reports
•
•
•
Creating a Report Template from an Event View
License:
Any
Before you generate a report, the reporting system creates a report template that you can modify to meet
your needs. You can add additional sections, modify automatically included sections, and delete
sections.
your needs. You can add additional sections, modify automatically included sections, and delete
sections.
To create a report template from an event view:
Access:
Admin/Any Security Analyst
Step 1
Populate an event view with the events you want in the report. You can do this in various ways:
•
Use an event search to define the events you want to view. For details on using the event search, see
.
•
Drill down through a workflow until you have the appropriate events in your event view. For details
on workflows and how to constrain events within a workflow, see
on workflows and how to constrain events within a workflow, see
Step 2
From the event view page, click
Report Designer
.
The Report Sections page appears with a section for each view in the captured workflow.
Step 3
Optionally, type a new name in the
Report Title
field and click
Save
.
Step 4
Optionally, delete any template sections that you want to exclude from the report by clicking the delete
icon (
icon (
) in the section’s title bar, and confirm the deletion.
The deleted sections disappear.
Note
The last report section in some workflows contains detail views that show packets, host profiles,
or vulnerabilities, depending on the workflow. Retrieving large numbers of events with these
detail views when generating your report may affect performance of the Defense Center.
or vulnerabilities, depending on the workflow. Retrieving large numbers of events with these
detail views when generating your report may affect performance of the Defense Center.
Step 5
Optionally, adjust the settings of the fields in your report sections.
For details on configuring the fields in a report section, see
Tip
To view the current column layout or chart formatting for a section, click the section’s
Preview
link.
Step 6
Optionally, change the title of any section by clicking the section title in the title bar.
The Set Section Title pop-up window appears. Type the section title and click
OK
.
Step 7
Optionally, add page breaks. Click the add page break icon (
).
A new page break object appears at the bottom of the template. Drag it in front of the section that should
start the new page. For information on using page breaks, see
start the new page. For information on using page breaks, see