Cisco Cisco Firepower Management Center 2000
44-19
FireSIGHT System User Guide
Chapter 44 Working with Reports
Using Report Templates
Previewing a Template Section
License:
Any
The preview function shows the field layout and sort order for table views and important legibility
characteristics of graphics, such as pie chart colors.
characteristics of graphics, such as pie chart colors.
To preview a template section:
Access:
Admin/Any Security Analyst
Step 1
At any time while editing a section, click
Preview
for the section.
The Preview pop-up window appears.
Step 2
Close the preview by clicking
OK
at the bottom of the window.
The Report Sections page appears.
Working with Searches in Report Template Sections
License:
Any
The FireSIGHT System provides a search editor to view the searches available in your report templates
and to define new custom searches.
and to define new custom searches.
Tip
The custom searches you make in a report template are specific to the template where you create them.
You can make searches that are reusable across all report templates in the event viewer. When you save
a custom search in the event viewer, it appears in the
You can make searches that are reusable across all report templates in the event viewer. When you save
a custom search in the event viewer, it appears in the
Search
drop-down menu of all report templates. For
details on using the event viewer to create and save custom searches, see
.
To create a custom search:
Access:
Admin/Any Security Analyst
Step 1
From the relevant section in the report template, click the edit icon (
) next to the
Search
field.
The Search Editor page appears with the table to be searched selected.
Step 2
Optionally, from the
Saved Searches
drop-down menu, select a predefined search.
The drop-down presents all available predefined searches for this table, including system-wide and
report-specific predefined searches.
report-specific predefined searches.
Step 3
Edit the search criteria in the appropriate fields. For certain fields, your constraints can include the same
operators (
operators (
<
,
<>
, and so on) as event searches. For the syntax of search criteria, see
.
If you enter multiple criteria, the search returns only the records that match all the criteria.
Step 4
Optionally, where the input parameter icon (
) appears, you can insert an input parameter from the
drop-down menu instead of typing a constraint value. For information on using input parameters in
report designs, see
report designs, see
.