Cisco Cisco Firepower Management Center 2000

Página de 1844
 
44-19
FireSIGHT System User Guide
 
Chapter 44      Working with Reports
  Using Report Templates
Previewing a Template Section
License: 
Any
The preview function shows the field layout and sort order for table views and important legibility 
characteristics of graphics, such as pie chart colors.
To preview a template section:
Access: 
Admin/Any Security Analyst
Step 1
At any time while editing a section, click 
Preview
 for the section.
The Preview pop-up window appears.
Step 2
Close the preview by clicking 
OK
 at the bottom of the window.
The Report Sections page appears.
Working with Searches in Report Template Sections
License: 
Any
The FireSIGHT System provides a search editor to view the searches available in your report templates 
and to define new custom searches.
Tip
The custom searches you make in a report template are specific to the template where you create them. 
You can make searches that are reusable across all report templates in the event viewer. When you save 
a custom search in the event viewer, it appears in the 
Search
 drop-down menu of all report templates. For 
details on using the event viewer to create and save custom searches, see 
.
To create a custom search:
Access: 
Admin/Any Security Analyst
Step 1
From the relevant section in the report template, click the edit icon (
) next to the 
Search
 field.
The Search Editor page appears with the table to be searched selected.
Step 2
Optionally, from the 
Saved Searches 
drop-down menu, select a predefined search.
The drop-down presents all available predefined searches for this table, including system-wide and 
report-specific predefined searches.
Step 3
Edit the search criteria in the appropriate fields. For certain fields, your constraints can include the same 
operators (
<
<>
, and so on) as event searches. For the syntax of search criteria, see 
.
If you enter multiple criteria, the search returns only the records that match all the criteria. 
Step 4
Optionally, where the input parameter icon (
) appears, you can insert an input parameter from the 
drop-down menu instead of typing a constraint value. For information on using input parameters in 
report designs, see