Chapter 9. Using CSA MC Reports

 < Day Day Up > 

This chapter covers the following topics:

  • Audit trail reporting

  • Event reporting

  • Group detail reporting

  • Host detail reporting

  • Policy detail reporting

  • Report viewing

  • Creating a sample report

Chapter 8, "Monitoring CSA Events," covered using the event log to provide the insight needed to manage your CSA deployment. The historical and near real-time views into the event database provide much of what you need when responding to security issues, alerting necessary parties, tuning the initial deployment, and developing future policy based on historical endpoint usage information. To most efficiently use the reporting feature of the CSA MC, it is necessary to understand how to efficiently use event sets, because they are the major configuration component of the event detail reports. For more information on event sets, revisit Chapter 8. This chapter examines another way to get information from the CSA database regarding stored events and configuration information. These capabilities are within the section of the CSA MC known as Reports.

CSA can provide reports regarding MC auditing information, events within the database, group and host configuration information, and policy information. You can access these reports through the Reports menu available from the main toolbar in the CSA MC, as shown in Figure 9-1. The default installation of the CSA MC includes some predefined reports, but can also create customized reports that suit your needs.

Figure 9-1. Accessing the Reports Menu


     < Day Day Up > 


    Cisco Security Agent
    Cisco Security Agent
    ISBN: 1587052059
    EAN: 2147483647
    Year: 2005
    Pages: 145
    Authors: Chad Sullivan

    flylib.com © 2008-2017.
    If you may any questions please contact us: flylib@qtcs.net