MARS - firewall log analysis

Unanswered Question
Apr 7th, 2010

I have 200 Cisco Firewalls. For doing Log analysis i am planning to use Cisco Mars. I need to get the report for Deny ip's list on weekly basis to my mail id from the Cisco Mars. Could any one help me on this. I already configured the Mars for this requirement. But i am getting the reports daily,that too the reports for not full day . I can see the reports for 2-3 Mins..

Could anyone share the procedure for generating the reports on weekly basis.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Farrukh Haroon Thu, 04/22/2010 - 06:56

You can set the time span for the report when you configure them.

Have you been able to solve this issue? Let me know if you need any help.



Chennai NOC Thu, 04/22/2010 - 21:05

Thanks for your response Farrukh!!!

I have configured the sheduled report like below,

Query/Reports  ----> Report ----> Add ---> Shedule

In this, I have selected weekly logs and view type will be CSV format. But still getting the
same error.

Also , Under the query option ---> Filter by time : Could you please clarify which option should i select.Here i tried with all the options almost , But still it is not coming up.

Hope except these above options no other way to specify the time range..




This Discussion