Is there a report or a way to create a report in CS-MARS(5.3.3), to list the actual inactive reporting devices. The report I found list only a graph with the amounth of inactive devices in time. I like to see a list with devicenames (or IP addresses). We have over 500 devices in MARS.
Hope someone can help me out.
Test with a query first:
query type: "Destination IPs ranked by Sessions"
Events: "Inactive CS-MARS reporting device"
Time Range: last 1 hour
You'll probably want to exclude some devices using a != in the device column.
If the query looks right, click "save as report".