To create a report template, do the following:
Steps:
Click the Analysis tab from the Manager Home page.
Select Event Reporting → Traditional Reports → Templates → New.
In Add Report Template page, select the Report Type. Based on this selection, the template fields change to fit the elements of the selected report. For example: Executive Summary
Make sure you have specified values for all the mandatory fields including the following. The mandatory fields are indicated by a red asterisk.
Fill in the following fields to narrow your report:
Admin Domain— Select the admin domain in which to view alerts.
Template Name— Unique, user-given name for the template.
Description— Unique descriptive information about the template.
Sensor:
All Devices is checked by default. This displays information of all devices present at the selected Admin domain. To select your preference of devices, de-select All Devices and select the devices from the list box.
Include Child Admin Domains— Displays device information for child domains.
By Device— This helps to choose a particular device.
Alert Severity— Select one or more from the Informational, Low, Medium, or High severities, which relate to attack impact.
Ranking Basis— Select one of the following:
Percentage change in attack count
Change in attack count value
Direction— Select one of the following directions of how alerts occurred should be displayed:
Upward Movers only
Upward and Downward Movers
Downward Movers only
Maximum Movers—
Enter the value of maximum occurred alerts to be displayed.
Comparison Interval (days)— Select the interval of the comparison in days.
Click Save when finished.
Once created, you can Edit, Run, or Delete the created report templates. Select the report template you want to edit/run/delete. By default, the last report template in the table is selected.
You can create a template by using a report type available in the Report Type field. When you click Add, by default, you will see a template created according to Big Movers report. For creating any other template, select the appropriate report type from the Report Type field. For specific information on the respective fields in a template, see the topic on the respective report. For example, if you are creating a template using Executive Summary report, see Generate Executive Summary reports.