12-07-2011 08:10 AM
Hi all!
I am setting up a Cisco MARS version 6.1.3 (3501). And I'm having trouble saving reports. I need saving the incidents in workstation. I need that the Mars generate a file with informations of incident, for example: Session/Incident ID, Event Type, Source IP / Port, Destination IP / Port, Protocol, Time, Reporting Device.... Equal to attached file.
How do I generate reports (PDF, DOC, XLS ...) on mars?
I appreciate any help.
Thanks
12-30-2011 07:28 AM
Hi jrmalmeida
I would do the following:
view the incident in question.
create a new case and assigned it to mars user who will look at it.
you then can email the case to security analyst that will be reviewing it.
keith
02-09-2012 05:53 AM
Hi Keith!
Thanks for information.
I generate the incidents starting from a query. Generating one CSV file: http://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.0/user/guide/combo/q_report.html#wp682776
In this CSV file does not have all the information I wanted, but it's something.
Thanks
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: