Scheduling an alert details report using the CLI

Use the commands in this section to schedule a consolidated Alert Details report.

Note
Before you can schedule an Alert Details report to be generated and sent through email, ensure that the SMTP server or domain is configured. You must also specify the email address of the report recipient. For details about configuring these report settings, refer to the Email Security — Server System Administration Guide.

To schedule an Alert Details report for automatic generation and email distribution:

Go to CLI configuration mode.

hostname > enable 
hostname # configure terminal

Specify how often to run the report.
- To update daily:
```
hostname (config) # report schedule run daily at <hh:mm>
```
  where <hh:mm> specifies the time to start based on a 24-hour clock.
- To update hourly:
```
hostname (config) # report schedule run hourly at <mm>
```
  where <mm> is the number of minutes within the hour.
- To update monthly:
```
hostname (config) # report schedule run monthly on {<date> | end of month} at <hh:mm>
```
  where:
  <date> is the day of the month when the update should occur.
  <hh:mm> specifies the time to start based on a 24-hour clock.
- To update weekly:
```
hostname (config) # report schedule run weekly every <day> at <hh:mm>
```
  where:
  <day> is the day of the week the when update should occur.
  <hh:mm> specifies the time to start based on a 24-hour clock.

Specify an Alert Details report.

hostname (config) # report schedule run <frequency> type alert_details

Specify a report format.

To generate a report in .xml format:

hostname (config) # report schedule run <frequency> type alert_details report_format xml

To generate a report in .json format:

hostname (config) # report schedule run <frequency> type alert_details report_format json

To generate a report in .csv format:

hostname (config) # report schedule run <frequency> type alert_details report_format csv

To generate a report in text format:

hostname (config) # report schedule run <frequency> type alert_details report_format text

Specify the time period for the reports.

To specify for the past day:

hostname (config) # report schedule run <frequency> type alert_details report_format <report_format> time_frame past_day

To specify for the past week:

hostname (config) # report schedule run <frequency> type alert_details report_format <report_format> time_frame past_week

To specify for the past month:

hostname (config) # report schedule run <frequency> type alert_details report_format <report_format> time_frame past_month

To specify for the past three months:

hostname (config) # report schedule run <frequency> type alert_details report_format <report_format> time_frame past_3_months

Specify the level of detail for the report.

To send basic information:

hostname (config) # report schedule run <frequency> alert_details report_format <report_format> time_frame <time_frame> report_detail concise

To send detailed information and abstracts:

hostname (config) # report schedule run <frequency> type alert_details report_format <report_format> time_frame <time_frame> report_detail normal

To send detailed information and abstracts about files and objects:

hostname (config) # report schedule run <frequency> type alert_details report_format <report_format> time_frame <time_frame> report_detail extended

Specify the alert type. Specify the malware object as the alert type.

To specify a malware object

hostname (config) # report schedule run <frequency> alert_details report_format <report_format> time_frame <time_frame> report_detail <report_detail> alert_type malware-object

Specify the delivery method for the report. The default delivery is email.

To deliver the report through email:

hostname (config) # report schedule run <frequency> type alert_details report_format <report_format> time_frame <time_frame> report_detail <report_detail> alert_type <alert_type> transport email

To deliver the report as a file:

hostname (config) # report schedule run <frequency> type alert_details report_format <report_format> time_frame <time_frame> report_detail <report_detail> alert_type <alert_type> transport file

Verify the configuration for the report schedule.

hostname (config) # show report schedule

Periodicity  MonthDay       WeekDay  Time    Transport Command
1 monthly      4              -        11:00   file      alert_details report_format text time_frame
past_week report_detail normal alert_type malware-object