Cisco Cisco Web Security Appliance S170 Guia Do Utilizador
22-7
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 22 Reporting
Using the Reporting Tab
Note
You can only print to PDF and export data from the Web Tracking page after the Web Tracking page
returns search results. Do this using the Printable Download link. From this link you can choose to
create a PDF that includes data displayed on the current page or up to 1,000 transactions, or you can
export all data to a CSV file. If you display details, data for up to 100 related transactions is included in
the PDF. The first 3000 characters are displayed for each related transaction.
returns search results. Do this using the Printable Download link. From this link you can choose to
create a PDF that includes data displayed on the current page or up to 1,000 transactions, or you can
export all data to a CSV file. If you display details, data for up to 100 related transactions is included in
the PDF. The first 3000 characters are displayed for each related transaction.
Exporting Report Data
Most reports include an Export link that allows you to export raw data to a comma-separated values
(CSV) file. After exporting the data to a CSV file, you can access and manipulate the data in it using
applications such as Microsoft Excel.
(CSV) file. After exporting the data to a CSV file, you can access and manipulate the data in it using
applications such as Microsoft Excel.
The exported CSV data displays all message tracking and reporting data in Greenwich Mean Time
(GMT) regardless of what is set on the Web Security appliance. The purpose of the GMT time conversion
is to allow data to be used independently from the appliance or when referencing data from appliances
in multiple time zones.
(GMT) regardless of what is set on the Web Security appliance. The purpose of the GMT time conversion
is to allow data to be used independently from the appliance or when referencing data from appliances
in multiple time zones.
The following example is an entry from a raw data export of the Anti-Malware category report, where
Pacific Daylight Time (PDT) is displayed as GMT - 7 hours:
Pacific Daylight Time (PDT) is displayed as GMT - 7 hours:
Begin Timestamp, End Timestamp, Begin Date, End Date, Name, Transactions Monitored,
Transactions Blocked, Transactions Detected
1159772400.0, 1159858799.0, 2006-10-02 07:00 GMT, 2006-10-03 06:59 GMT, Adware, 525,
2100, 2625
Note
Category headers are different for each type of report.
Note
If you export localized CSV data, the headings may not be rendered properly in some browsers. This
occurs because some browsers may not use the proper character set for the localized text. To work around
this problem, you can save the file to your local machine, and open the file in any web browser using
File > Open. When you open the file, select the character set to display the localized text.
occurs because some browsers may not use the proper character set for the localized text. To work around
this problem, you can save the file to your local machine, and open the file in any web browser using
File > Open. When you open the file, select the character set to display the localized text.
Table 22-3
Viewing Raw Data Entries
Category Header
Value
Description
Begin Timestamp
1159772400.0
Query start time in number of seconds from epoch.
End Timestamp
1159858799.0
Query end time in number of seconds from epoch.
Begin Date
2006-10-02 07:00
GMT
Date the query began.
End Date
2006-10-03 06:59
GMT
Date the query ended.
Name
Adware
Name of the malware category.
Transactions Monitored
525
Number of transactions monitored.
Transactions Blocked
2100
Number of transactions blocked.
Transactions Detected
2625
Total number of transactions:
Number of transactions detected + Number of
transactions blocked.
transactions blocked.