You can create custom reports to run on demand or on
schedule (each night). For predefined reports, select
Monitor
Reports
.
After the firewall has generated a scheduled
custom report, you risk invalidating the past results of that report
if you modify its configuration to change its future output. If
you need to modify a scheduled report configuration, the best practice
is to create a new report.
Add
a custom report to create a new one.
To base the report on an existing template,
Load Template
and
select the template. To generate a report on demand, instead of
or in addition to the
Scheduled
time, click
Run
Now
. Specify the following settings to define the report.
Custom Report Settings
Description
Name
Enter a name to identify the report (up
to 31 characters). The name is case-sensitive and must be unique.
Use only letters, numbers, spaces, hyphens, and underscores.
Description
Enter a description for the custom report.
Database
Choose the database to use as the data source
for the report.
Scheduled
Select this option to run the report each
night. The report then becomes available by selecting
Monitor
Reports
.
Time Frame
Choose a fixed time frame or choose
Custom
and
specify a date and time range.
Sort By
Choose sorting options to organize the report,
including the amount of information to include in the report. The
available options depend on the choice of database.
Group By
Choose grouping options to organize the
report, including the amount of information to include in the report.
The available options depend on the choice of database.
Columns
Select Available Columns to include in the
custom report and add (
) them to Selected
Columns. Select
Up
,
Down
,
Top
,
and
Bottom
to reorder selected columns. As
needed, you can also select and remove (
) previously selected
columns.
Query Builder
To build a report query, specify the following
and click
Add
. Repeat as needed to construct
the full query.
Connector
—Choose
the connector (
and
or
or
)
to precede the expression you are adding.
Negate
—Select this option to interpret
the query as a negation. In the previous example, the negate option
causes a match on entries that are not in the past 24 hours or are
not from the untrust zone.
Attribute
—Choose a data element. The
available options depend on the choice of database.
Operator
—Choose the criterion to determine
whether the attribute applies (such as =). The available options
depend on the choice of database.