cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4086
Views
0
Helpful
2
Replies

Generate Reports - Saving workstation

jrmalmeida
Level 1
Level 1

Hi all!

I am setting up a Cisco MARS version 6.1.3 (3501). And I'm having trouble saving reports. I need saving the incidents in workstation. I need that the Mars generate a file with informations of incident, for example: Session/Incident ID, Event Type, Source IP / Port, Destination IP / Port, Protocol, Time, Reporting Device.... Equal to attached file.

How do I generate reports (PDF, DOC, XLS ...) on mars?

I appreciate any help.

Thanks

2 Replies 2

Keith Craycraft
Level 1
Level 1

Hi jrmalmeida

I would do the following:

view the incident in question.

create a new case  and assigned it to mars user who will look at it.

you then can email the case to security analyst that will be reviewing it.

keith

Hi Keith!

Thanks for information.

I generate the incidents starting from a query. Generating one CSV file: http://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.0/user/guide/combo/q_report.html#wp682776

In this CSV file does not have all the information I wanted, but it's something.

Thanks

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: