Generating an alert details report using the CLI

Prev Next

Use the commands in this section to generate a consolidated Alert Details report.

Note

Before a report can be generated and sent through email, ensure that the SMTP server or domain is configured. You must also specify the email address of the report recipient. For details about configuring these report settings, refer to the Email Security — Server System Administration Guide.

To generate an Alert Details report:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Specify an Alert Details report.

    hostname (config) # report generate type alert_details
  3. Specify a report format.

    • To generate a report in .xml format:

      hostname (config) # report generate type alert_details report_format xml
    • To generate a report in .json format:

      hostname (config) # report generate type alert_details report_format json
    • To generate a report in .csv format:

      hostname (config) # report generate type alert_details report_format csv
    • To generate a report in text format:

      hostname (config) # report generate type alert_details report_format text
  4. Specify the time period for this report.

    • To specify for the past day:

      hostname (config) # report generate type alert_details report_format <report_format> time_frame past_day
    • To specify for the past week:

      hostname (config) # report generate type alert_details report_format <report_format> time_frame past_week
    • To specify for the past month:

      hostname (config) # report generate type alert_details report_format <report_format> time_frame past_month
    • To specify for the past three months:

      hostname (config) # report generate type alert_details report_format <report_format> time_frame past_3_months
    • To specify the range between the start and end dates:

      hostname (config) # report generate type alert_details report_format <report_format> time_frame between start_date yyyy/mm/dd start_time hh:mm:ss end_date yyyy/mm/dd end_time hh:mm:ss
  5. Specify the level of detail for the report.

    • To send basic information:

      hostname (config) # report generate type alert_details report_format <report_format> time_frame <time_frame> report_detail concise
    • To send detailed information and abstracts:

      hostname (config) # report generate type alert_details report_format <report_format> time_frame <time_frame> report_detail normal
    • To send detailed information and abstracts about files and objects:

      hostname (config) # report generate type alert_details report_format <report_format> time_frame <time_frame> report_detail extended
  6. Specify the alert type.

    • To specify a malware object:

      hostname (config) # report generate type alert_details report_format <report_format> time_frame <time_frame> report_detail <report_detail> alert_type malware-object
  7. Specify the delivery method for the report. The default delivery is email.

    • To deliver the report through email:

      hostname (config) # report generate type alert_details report_format <report_format> time_frame <time_frame> report_detail <report_detail> alert_type <alert_type> transport email
    • To deliver the report as a file:

      hostname (config) # report generate type alert_details report_format <report_format> time_frame <time_frame> report_detail <report_detail> alert_type <alert_type> transport file

The following example shows how to deliver an Alert Details report with normal detail in .csv format as a file for a malware object alert type that was found during the past month:

hostname (config) # report generate type Alert_Details report_format csv report_detail normal alert_type malware-object time_frame past_month transport file
Execute report command. Check email or WebUI for report.