Cisco Cisco Web Security Appliance S190 Mode D'Emploi
23-5
Cisco IronPort AsyncOS 7.0 for Web User Guide
OL-23079-01
Chapter 23 Reporting
Exporting Report Data
The appliance stores up to 12 instances of each scheduled report (up to 1000
reports). Archived reports are stored in the
reports). Archived reports are stored in the
/periodic_reports
directory on the
appliance. Archived reports are deleted automatically. As new reports are added,
older reports are removed to keep the number at 1000. The limit of 12 instances
applies to each scheduled report with the same name and time range.
older reports are removed to keep the number at 1000. The limit of 12 instances
applies to each scheduled report with the same name and time range.
Exporting Report Data
Export links on the display pages will export raw data to a comma-separated
values (CSV) file, that you can access and manipulate using database applications
such as, Microsoft Excel.
values (CSV) file, that you can access and manipulate using database applications
such as, Microsoft Excel.
The following example is an entry from a raw data export of the Anti-Malware
category report, where Pacific Daylight Time (PDT) is displayed as GMT - 7
hours:
category report, where Pacific Daylight Time (PDT) is displayed as GMT - 7
hours:
Begin Timestamp, End Timestamp, Begin Date, End Date, Name,
Transactions Monitored, Transactions Blocked, Transactions Detected
1159772400.0, 1159858799.0, 2006-10-02 07:00 GMT, 2006-10-03 06:59
GMT, Adware, 525, 2100, 2625
Table 23-1
Viewing Raw Data Entries
Category Header
Value
Description
Begin Timestamp
1159772400.0
Query start time in number of
seconds from epoch.
seconds from epoch.
End Timestamp
1159858799.0
Query end time in number of
seconds from epoch.
seconds from epoch.
Begin Date
2006-10-02 07:00
GMT
Date the query began.
End Date
2006-10-03 06:59
GMT
Date the query ended.
Name
Adware
Name of the malware category.
Transactions
Monitored
525
Number of transactions monitored.