Use the report generate command to generate consolidated Alert reports.
Note
Before a report can be generated and sent through email, ensure that the SMTP server or domain is configured. You must also specify the email address of the report recipient. For details about configuring these report settings, refer to the Malware Analysis System Administration Guide .
Enable the CLI configuration mode.
hostname > enable hostname # configure terminal
Enter the report generate command.
hostname (config) # report generate
Specify the type of report. The default report is Alert Details.
hostname (config) # report generate type Alert_Details
Specify a report format.
To generate a report in .xml format:
hostname (config) # report generate report_format xml
To generate a report in .json format:
hostname (config) # report generate report_format json
To generate a report in .csv format:
hostname (config) # report generate report_format csv
To generate a report in text format:
hostname (config) # report generate report_format text
Specify the level of detail for the report.
To send basic information in text format:
hostname (config) # report generate report_detail concise
To send detailed information and abstracts in text format:
hostname (config) # report generate report_detail normal
To send detailed information and abstracts about files and objects in text format:
hostname (config) # report generate report_detail extended
Specify the alert type as a malware object.
hostname (config) # report generate alert_type malware-object
Specify the time period for this report generation.
To specify for the past day:
hostname (config) # report generate time_frame past_day
To specify for the past week:
hostname (config) # report generate time_frame past_week
To specify for the past month:
hostname (config) # report generate time_frame past_month
To specify for the past three months:
hostname (config) # report generate time_frame past_3_months
To specify the range between the start and end dates:
hostname (config) # report generate time_frame between start_date <yyyy>/<mm>/<dd> start_time <hh>:<mm>:<ss> end_date <yyyy>/<mm>/<dd> end_time <hh>:<mm>:<ss>
Specify the delivery method for the report. The default delivery is email.
To deliver the report through email:
hostname (config) # report generate transport email
To deliver the report as a file:
hostname (config) # report generate transport file
The following example shows how to deliver a Alert Details report with normal detail in .csv format as a file for a malware object alert type that was found during the past month:
hostname (config) # report generate type Alert_Details report_format csv report_detail normal alert_type malware-object time_frame past_month transport file Execute report command. Check email or WebUI for report.