Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
272
Views
5
Helpful
1
Replies

CS-MARS: Report of inactive reporting devices?

Go to solution
rpluim
Level 1
Level 1

‎03-20-2008 01:13 AM - edited ‎03-09-2019 08:20 PM

Hi,

Is there a report or a way to create a report in CS-MARS(5.3.3), to list the actual inactive reporting devices. The report I found list only a graph with the amounth of inactive devices in time. I like to see a list with devicenames (or IP addresses). We have over 500 devices in MARS.

Hope someone can help me out.

Regards, Robbert

Labels:
0 Helpful
1 Accepted Solution

Accepted Solutions

Go to solution
mhellman
Level 7
Level 7

‎03-20-2008 07:05 AM

Test with a query first:

query type: "Destination IPs ranked by Sessions"

Events: "Inactive CS-MARS reporting device"

Time Range: last 1 hour

You'll probably want to exclude some devices using a != in the device column.

If the query looks right, click "save as report".

View solution in original post

1 Reply 1

Go to solution
mhellman
Level 7
Level 7

‎03-20-2008 07:05 AM

Test with a query first:

query type: "Destination IPs ranked by Sessions"

Events: "Inactive CS-MARS reporting device"

Time Range: last 1 hour

You'll probably want to exclude some devices using a != in the device column.

If the query looks right, click "save as report".

Customers Also Viewed These Support Documents