229
Reporting
Reporting top-level and drill-down
format. All users can navigate from one format to another by selecting one of
the report formats listed in the drop-down menu in the upper right corner of the
report window.
About report types
Reports listed in the Network Security console Reporting menu are top-level
reports. In most top-level reports, you can also generate one or more levels of
drill-down reports that provide a more focused level of detail. For example, you
can generate an Events Per Day report and then select a particular day from the
report for which to generate an Events Per Hour drill-down report. The
drill-down report will break out that day’s event count into 24 separate event
counts—one for each hour of the day you selected. For any hour of that day, you
can generate other drill-down reports, such as a Top Event Types report to view
the types of events that occurred most frequently during that hour.
Notice that many reports, such as Events Per Hour and Top Event Types, can be
generated as both top-level Network Security console reports, and also as
drill-down reports from within other top-level reports, or even from within
other drill-down reports. For example, from the Events Per Month report, you
can drill down to an Events Per Day report, and from there to an Events Per
Hour report, but all of these reports can also be generated as top-level reports.
Some reports are only available as drill-down reports.
To view drill-down reports, right-click in the area of the report representing the
data for which you want to generate a drill-down report. For example, right-click
in a column, bar, pie piece, or table row. Then select a report type from the
pop-up menu that appears. Symantec Network Security will generate the
drill-down report based on the data related to the column, bar, pie piece or table
row you selected. After you generate drill-down reports, you can navigate
between the top-level report and its drill-down reports by clicking
Forward
and
Back
in the Report window.
Note:
Allow a few seconds for the full report data to load when you generate a
report or navigate between reports. Once the data is loaded, you can view pop-up
menus for drill-down reports and any report counts on the chart report formats.
About incident/event reports
Some reports list incidents, event types, and base events. Incidents are
categories of related event types, and derive their names from the highest
priority event type correlated to the incident.
Summary of Contents for 10521146 - Network Security 7120
Page 1: ...Symantec Network Security Administration Guide...
Page 12: ...12 Contents Index...
Page 14: ...14...
Page 70: ...70...
Page 110: ...110 Populating the topology database Adding nodes and objects...
Page 158: ...158 Responding Managing flow alert rules...
Page 188: ...188...
Page 242: ...242 Reporting Playing recorded traffic...
Page 268: ...268 Managing log files Exporting data...
Page 316: ...316 Advanced configuration Configuring advanced parameters...
Page 318: ...318...
Page 338: ...338 SQL reference Using MySQL tables...
Page 366: ...366 Glossary...
Page 392: ...392 Index...
