Trellix ESM provides 6 standard case management reports.
From the Trellix ESM dashboard, click
.png "menu.png")
and select More Settings.On the system navigation tree, select Trellix ESM and click
.png "Settings.png")
.Click → .
Complete sections 1, 2, and 3.
In section 4, select Query CSV.
In section 5, select the case management report to run:
Case Management Summary — Includes case ID numbers, the severity assigned to the cases, their status, the users they are assigned to, the organizations where they are assigned (if any), the date and time that the cases were added, the date and time that the cases were updated (if they have been), and the case summaries.
Case Management Details — Includes all information in the Case Management Summary report and the ID numbers of the events linked to the cases and the information included in the notes sections of the cases.
Case Time to Resolution — Shows the length of time that it took between status changes (for example, the differential between the Open time stamp and Closed time stamp). By default, it lists the cases with a status of Closed by Case ID number and severity, organization, Created date, last update, summary, and time difference.
Cases per Assignee — Includes the number of cases assigned to a user or group.
Cases per Organization — Includes the number of cases per organization.
Cases per Status — Includes the number of cases per status type.
Complete section 6, then click Save.
The selected reports appear on the Reports list.