Generating customized reports

Prev Next

Use the report generate command to generate consolidated Alert reports.

Note

Before a report can be generated and sent through email, ensure that the SMTP server or domain is configured. You must also specify the email address of the report recipient. For details about configuring these report settings, refer to the Malware Analysis System Administration Guide .

To generate and view reports:
  1. Enable the CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Enter the report generate command.

    hostname (config) # report generate
  3. Specify the type of report. The default report is Alert Details.

    hostname (config) # report generate type Alert_Details
  4. Specify a report format.

    • To generate a report in .xml format:

      hostname (config) # report generate report_format xml
    • To generate a report in .json format:

      hostname (config) # report generate report_format json
    • To generate a report in .csv format:

      hostname (config) # report generate report_format csv
    • To generate a report in text format:

      hostname (config) # report generate report_format text
  5. Specify the level of detail for the report.

    • To send basic information in text format:

      hostname (config) # report generate report_detail concise
    • To send detailed information and abstracts in text format:

      hostname (config) # report generate report_detail normal
    • To send detailed information and abstracts about files and objects in text format:

      hostname (config) # report generate report_detail extended
  6. Specify the alert type as a malware object.

    hostname (config) # report generate alert_type malware-object
  7. Specify the time period for this report generation.

    • To specify for the past day:

      hostname (config) # report generate time_frame past_day
    • To specify for the past week:

      hostname (config) # report generate time_frame past_week
    • To specify for the past month:

      hostname (config) # report generate time_frame past_month
    • To specify for the past three months:

      hostname (config) # report generate time_frame past_3_months
    • To specify the range between the start and end dates:

      hostname (config) # report generate time_frame between start_date <yyyy>/<mm>/<dd> start_time <hh>:<mm>:<ss> end_date <yyyy>/<mm>/<dd> end_time <hh>:<mm>:<ss>
  8. Specify the delivery method for the report. The default delivery is email.

    • To deliver the report through email:

      hostname (config) # report generate transport email
    • To deliver the report as a file:

      hostname (config) # report generate transport file

The following example shows how to deliver a Alert Details report with normal detail in .csv format as a file for a malware object alert type that was found during the past month:

hostname (config) # report generate type Alert_Details report_format csv report_detail normal alert_type malware-object time_frame past_month transport file
Execute report command. Check email or WebUI for report.