Cisco Cisco Firepower Management Center 4000
44-23
FireSIGHT System User Guide
Chapter 44 Working with Reports
Using Report Templates
To edit user-defined input parameters for a report template:
Access:
Admin/Any Security Analyst
Step 1
Select
Overview > Reporting
.
Step 2
Select the
Report Templates
tab.
The Report Templates page appears.
Step 3
Click the edit icon (
) for the template you want to edit.
The Report Sections page appears.
Step 4
Click
Advanced
.
The Advanced Settings pop-up window appears. The
Input Parameters
section lists all available
user-defined parameters for the report template.
Step 5
Click the edit icon (
).
The Edit Input Parameter pop-up window appears.
Step 6
Change the parameter name in the
Name
field and the parameter type using the
Type
drop-down menu,
then click
OK
.
The changed parameter appears in the
Input Parameters
section.
Step 7
Repeat the steps above until you have defined all the parameters you need. Click
OK
.
Your changes are saved and the Report Sections page reappears.
To delete user-defined input parameters for a report template:
Access:
Admin/Any Security Analyst
Step 1
Select
Overview > Reporting
.
Step 2
Select the
Report Templates
tab.
The Report Templates page appears.
Step 3
Click the edit icon (
) for the template you want to edit.
The Report Sections page appears.
Step 4
Click
Advanced
.
The Advanced Settings pop-up window appears. The
Input Parameters
section lists all available
user-defined parameters for the report template.
Step 5
Click the delete icon (
) next to the input parameter and confirm.
Step 6
Click
OK
.
The input parameter is deleted and the Report Sections page reappears.
You use input parameters to expand the usefulness of your searches. The input parameter instructs the
system to collect a value at generation time from the person who requests the report. In this way, you
can dynamically constrain a report at generation time to show a particular subset of data without
changing the search. For example, you can provide an input parameter for the
system to collect a value at generation time from the person who requests the report. In this way, you
can dynamically constrain a report at generation time to show a particular subset of data without
changing the search. For example, you can provide an input parameter for the
Destination IP
field of a
report section that drills down on security events at a department level. When you generate the report,
you can type the IP network segment for a particular department to get data for that department only.
you can type the IP network segment for a particular department to get data for that department only.