Enterasys Intrusion Prevention System, Reporting Manual

Page: 116 / 122

Using Executive Reporting Legacy Reporting
11-28 Enterasys IPS Analysis and Reporting Guide
You may click Reset to clear all field entries.
3. Click Execute .
The display area is populated with the results of your query.
Using Executive Reporting
Executive Reporting provides high-level reporting capabilities. There are eight executive level
reports which summarize event counts and the distribution of event types over reporting periods
of one week.
To access the Executive Reporting Main Window and generate new reports:
1. Click Reporting in the top right navigation area.
The Executive Reporting main window appears as shown in Figure 11-24 . Selection options
are shown in the left navigation panel.
Time Mode The Time Mode field interacts with the Time Start/Stop field in the following ways:
• “hours” value selected: The number value placed in the Time Start field indicates
number of hours from the current time counting backwards to retrieve the
events. For example, if the value indicates 36, events in the past 36 hours will be
retrieved
• “start” value selected: only the value from the Time Start field is taken into
consideration. Events starting at that specified time will be retrieved.
• “stop” value selected: only the value from the Time Stop field is taken into
consideration. Events up to that specified time are retrieved.
• “span” value selected: both values in the Time Start and Time Stop fields are
taken into consideration. Events that occurred between these times are
retrieved.
• “date” value selected: only the value specified in the Time Start field is taken into
consideration. Events that occurred only during the specified date are retrieved.
• “dates” value selected: both values in the Time Start and Time Stop fields are
taken into consideration. Events that occurred between the specified dates
(inclusive) are retrieved.
All other values ignore Time Start and Stop fields.
Sensor Match Text field specifying sensor names. It may contain one or more names. If more than
one name is specified, the values must be separated by spaces.
Table 11-9 Additional Reports Field Usage and Description (Continued)
Field Description