Reports

The Reports tab is used to turn statistical information into graphs or charts. These can be saved and processed later in the Comma Separated Value format (.csv) by using ERA tools to provide graphs and graphical outputs. By default, ERA saves output in HTML format. Most of the reports related to infiltrations are generated from the Threat log.

 

To browse and select graphical styles, use the Style drop-down menu in the Report section.

 

ERA provides several predefined templates for reports. To select a report,use the Type drop-down menu:

 

· Top Clients with most Threats
Lists the most ”active” client workstations (measured by number of detected threats).
· Top Users with most Threats
Lists the most ”active” users (measured by number of detected threats).
· Top Threats
List of the most frequently detected threats.
· Top Threats by Spread
Shows top threats by spread
· Threats Progress
Progress of malware events (number).
· Threats Comparative Progress
Progress of malware events by selected threats (using filter) compared with the total number of threats.
· Threats By Scanner
Number of threat alerts from the individual program modules.
· Threats By Object
Number of threat alerts according to the way they attempted to infiltrate (emails, files, boot sectors).
· Combined Top Clients with most Threats / Top Threats
Combination of the above-mentioned types.
· Combined Top Threats / Threats Progress
Combination of the above-mentioned types.
· Combined Top Threats / Threats Comparative Progress
Combination of the above-mentioned types.
· Clients of Groups
Shows clients count of selected groups.
· Clients of Groups to All
Shows ratio of clients count of selected groups to all clients count, in percentage.
· Combined Clients of Groups / Clients Report
Shows clients count of selected groups and clients of each group in the table (After you click the name of the group).
· Top Clients with most Network Attacks
Shows top clients with most Network Attacks.
· Top Network Attacks
Shows top Network Attacks.
· Top Network Attacks Sources
Shows top Network Attacks Sources.
· Network Attacks Progress
Shows progress of Network Attacks.
· Combined Top Clients with most Network Attacks / Top Network Attacks
Shows top clients with most Network Attacks and top Network Attacks for each client in the top table (After you click the name of the client).
· Top Clients with most SMS Spam
Shows top clients with most SMS Spam.
· Top SMS Spammers
Shows top SMS Spammers for specified Targets.
· SMS Spam Progress
Shows progress of SMS Spam.
· Combined Top Clients with most SMS Spam / Top SMS Spammers
Shows top clients with most SMS Spam and top SMS Spammers for each client in the top table (After you click the name of the client).
· Clients Report, Threats Report, Firewall Report, Events Report, Scans Report, Tasks Report, Mobile Report, Quarantine Report
Typical reports that can be viewed in the Clients, Threat Log, Event Log, Scan Log or Tasks tab.
· Comprehensive Threats Report
Summary of Combined Top Clients with most Threats/ Top Threats; Combined Top Threats / Threats Comparative Progress; Threats Progress
· Comprehensive Network Attacks Report
Summary of Combined Top Clients with most Network Attacks / Top Network Attacks; Top Network Attacks; Top Network Attacks Sources; Network Attacks Progress
· Comprehensive SMS Spam Report
Summary of Combined Top Clients with most SMS Spam / Top SMS Spammers; Top SMS Spammers; SMS Spam Progress

 

In the Filter section you can use the Target clients or Threat drop-down menus to select which clients or viruses will be included in the report.

 

Other details can be configured by clicking the Additional Settings… button. These settings apply mostly to data in the heading and in the types of graphical diagrams used. However, you can also filter data according to the status of chosen attributes as well as choose which report format will be used (.html, .csv).

 

The Interval tab allows you to define an interval for which the report will be generated:

 

· Current
Only events which occurred in a chosen time period will be included in the report – e.g., if a report is created on Wednesday and the interval is set to Current Week, then the events from Sunday, Monday, Tuesday, and Wednesday will be included.
 
· Completed
Only events which occurred in a chosen, closed period will be included in the report (i.e., the entire month of August, or a whole week – from Sunday to next Saturday). If the option Add also the current period is selected, the report will include events from the last completed period up to the moment of creation.

 

Example:

 

We want to create a report including events from the last calendar week, i.e., from Sunday to next Saturday. We want this report to be generated on the following Wednesday (after Saturday).

 

In the Interval tab, select Completed and 1 Weeks. Remove Add also the current period. In the Scheduler tab set Frequency to Weekly and select Wednesday. The other settings can be configured according to the administrator‘s discretion.

 

· From / To
Use this setting to define a period for which the report will be generated.

 

The Scheduler tab allows you to define and configure an automatic report in chosen time or intervals (Using the Frequency section).

 

After scheduling the report, click the Select Target… button to specify where the report is to be saved. Reports can be saved to ERAS (default), sent via email to a chosen address, or exported to a folder. The latter option is useful if the report is sent to a shared folder on your organization‘s intranet where it can be can be viewed by other employees.

 

To send generated reports via email, you need to enter the SMTP server and sender address information in Tools > Server Options > Other settings.

 

To save settings of defined reports to a template, click the Save or Save as… buttons. If you are creating a new template, click the Save as… button and give the template a name.

 

At the top of the Console window in the Report templates section, you can see names of templates that were already created. Next to the template names, you can find information about time/intervals and when the reports are generated according to the preset templates. Click the Generate Now button (make sure the Options tab is selected) to generate a report at any moment regardless of the schedule.

 

Existing report templates can be imported/exported from/to an .xml file by clicking on the Import.../Export... button. Name conflicts during the import (existing and imported template with the same name) are solved by assigning a random string after the name of an imported template.

 

Previously generated reports can be viewed in the Generated Reports tab. For more options, select individual (or multiple) reports and use the context menu (right-click).

 

Templates placed in the Favorites list can be used later to immediately generate new reports. To move a template to Favorites, right-click the report and click Add to Favorites from the context menu.