Cisco Cisco Email Security Appliance C390 Mode D'Emploi
Chapter 2 Using Email Security Monitor
Email Security Monitor Pages
2-70
Cisco IronPort AsyncOS 7.3 for Email Daily Management Guide
OL-23080-01
The comma-separated values (CSV) Report Type is an ASCII text file which
contains the tabular data of the scheduled report. Each CSV file may contain
up to 100 rows. If a report contains more than one type of table, a separate
CSV file will be created for each table. Multiple CSV files for a single report
will be compressed into a single .zip file for the archived file storage option
or will all be attached to separate e-mail messages for e-mail delivery.
contains the tabular data of the scheduled report. Each CSV file may contain
up to 100 rows. If a report contains more than one type of table, a separate
CSV file will be created for each table. Multiple CSV files for a single report
will be compressed into a single .zip file for the archived file storage option
or will all be attached to separate e-mail messages for e-mail delivery.
For information about configuring scheduled or on-demand reports, see
.
•
CSV files retrieved via HTTP. You can retrieve the data used to build the
charts and graphs in the Email Security Monitor feature via HTTP. This
delivery method is useful if you plan to perform further analysis on the data
via other tools. You can automate the retrieval of this data, for example, by an
automatic script that will download raw data, process, and then display the
results in some other system.
charts and graphs in the Email Security Monitor feature via HTTP. This
delivery method is useful if you plan to perform further analysis on the data
via other tools. You can automate the retrieval of this data, for example, by an
automatic script that will download raw data, process, and then display the
results in some other system.
Retrieving CSV Data Via Automated Processes
The easiest way to get the HTTP query you will need is to configure one of the
Email Security Monitor pages to display the type of data you want. You can then
copy the Export link. This is the download URL. When automating data retrieval
like this it is important to note which parameters in the download URL should be
fixed and which should change (see below).
Email Security Monitor pages to display the type of data you want. You can then
copy the Export link. This is the download URL. When automating data retrieval
like this it is important to note which parameters in the download URL should be
fixed and which should change (see below).
The download URL is encoded in such a way that it can be copied to an external
script that can execute the same query (using proper HTTP authentication) and get
a similar data set. The script can use Basic HTTP Authentication or cookie
authentication. Keep the following in mind when retrieving CSV data via
automated processes:
script that can execute the same query (using proper HTTP authentication) and get
a similar data set. The script can use Basic HTTP Authentication or cookie
authentication. Keep the following in mind when retrieving CSV data via
automated processes:
•
Time range selection (past hour, day, week, etc) in relation to when the URL
is used again. If you copy the URL to retrieve a CSV data set for “Past Day,”
the next time you use that URL you will get a new data set that covers the
“Past Day” from the time you send the URL again. The date range selection
is retained, and appears in the CSV query string (e.g.
is used again. If you copy the URL to retrieve a CSV data set for “Past Day,”
the next time you use that URL you will get a new data set that covers the
“Past Day” from the time you send the URL again. The date range selection
is retained, and appears in the CSV query string (e.g.
date_range=current_day
).
•
Filtering and grouping preferences for the data set. Filters are retained and
appear in the query string. Note that filters in reports are rare — one example
is the “Global / Local” outbreaks selector in the Virus Outbreaks report.
appear in the query string. Note that filters in reports are rare — one example
is the “Global / Local” outbreaks selector in the Virus Outbreaks report.