Cisco Cisco Email Security Appliance C160 Mode D'Emploi

CSV files retrieved via HTTP. You can retrieve the data used to build the charts and graphs in the 
Email Security Monitor feature via HTTP. This delivery method is useful if you plan to perform 
further analysis on the data via other tools. You can automate the retrieval of this data, for example, 
by an automatic script that will download raw data, process, and then display the results in some 
other system. 

The easiest way to get the HTTP query you will need is to configure one of the Email Security Monitor 
pages to display the type of data you want. You can then copy the Export link. This is the download 
URL. When automating data retrieval like this it is important to note which parameters in the download 
URL should be fixed and which should change (see below).

The download URL is encoded in such a way that it can be copied to an external script that can execute 
the same query (using proper HTTP authentication) and get a similar data set. The script can use Basic 
HTTP Authentication or cookie authentication. Keep the following in mind when retrieving CSV data 
via automated processes:

Time range selection (past hour, day, week, etc) in relation to when the URL is used again. If you 
copy the URL to retrieve a CSV data set for “Past Day,” the next time you use that URL you will get 
a new data set that covers the “Past Day” from the time you send the URL again. The date range 
selection is retained, and appears in the CSV query string (e.g. 

date_range=current_day

).

Filtering and grouping preferences for the data set. Filters are retained and appear in the query 
string. Note that filters in reports are rare — one example is the “Global / Local” outbreaks selector 
in the Outbreaks report.

The CVS download returns all rows of data in the table for the selected time range.

The CSV download returns the rows of data in the table ordered by timestamp and key. You can 
perform further sorting in a separate step such as via a spreadsheet application.

The first row contains column headers that match the display names shown in the report. Note that 
timestamps (see 

) and keys (see 

) also appear.

http://example.com/monitor/content_filters?format=csv&sort_col_ss_0_0_0=MAIL_CONTENT_FILT
ER_INCOMING.RECIPIENTS_MATCHED&section=ss_0_0_0&date_range=current_day&sort_order
_ss_0_0_0=desc&report_def_id=mga_content_filters

To specify basic HTTP Authentication credentials to the URL:

http://example.com/monitor/

becomes:

http://username:password@example.com/monitor/

The downloaded file is in CSV format and has a .csv file extension. The file header has a default 
filename, which starts with the name of the report, then the section of the report.