The Reports tab is used to turn statistical information into
graphs or charts. These can be saved and processed later in the
Comma Separated Value format (.csv) by
using ERA tools to provide graphs and graphical outputs. By
default, ERA saves output in HTML format. Most of the reports
related to infiltrations are generated from the Threat log.
To browse and select graphical styles, use the Style drop-down menu in the Report section.
ERA provides several predefined templates for reports. To select
a report,use the Type drop-down
menu:
·
|
Top Clients with most Threats
Lists the most active client workstations (measured by number of
detected threats). |
·
|
Top Users with most Threats
Lists the most active users (measured by number of detected
threats). |
·
|
Top Threats
List of the most frequently detected threats. |
·
|
Top Threats by Spread
Shows top threats by spread |
·
|
Threats Progress
Progress of malware events (number). |
·
|
Threats Comparative Progress
Progress of malware events by selected threats (using filter)
compared with the total number of threats. |
·
|
Threats By Scanner
Number of threat alerts from the individual program modules. |
·
|
Threats By Object
Number of threat alerts according to the way they attempted to
infiltrate (emails, files, boot sectors). |
·
|
Combined Top Clients with most Threats / Top
Threats
Combination of the above-mentioned types. |
·
|
Combined Top Threats / Threats
Progress
Combination of the above-mentioned types. |
·
|
Combined Top Threats / Threats Comparative
Progress
Combination of the above-mentioned types. |
·
|
Clients of Groups
Shows clients count of selected groups. |
·
|
Clients of Groups to All
Shows ratio of clients count of selected groups to all clients
count, in percentage. |
·
|
Combined Clients of Groups / Clients
Report
Shows clients count of selected groups and clients of each group in
the table (After you click the name of the group). |
·
|
Top Clients with most Network
Attacks
Shows top clients with most Network Attacks. |
·
|
Top Network Attacks
Shows top Network Attacks. |
·
|
Top Network Attacks Sources
Shows top Network Attacks Sources. |
·
|
Network Attacks Progress
Shows progress of Network Attacks. |
·
|
Combined Top Clients with most Network
Attacks / Top Network Attacks
Shows top clients with most Network Attacks and top Network Attacks
for each client in the top table (After you click the name of the
client). |
·
|
Top Clients with most SMS Spam
Shows top clients with most SMS Spam. |
·
|
Top SMS Spammers
Shows top SMS Spammers for specified Targets. |
·
|
SMS Spam Progress
Shows progress of SMS Spam. |
·
|
Combined Top Clients with most SMS Spam /
Top SMS Spammers
Shows top clients with most SMS Spam and top SMS Spammers for each
client in the top table (After you click the name of the
client). |
·
|
Clients Report, Threats Report, Firewall
Report, Events Report,
Scans Report, Tasks
Report, Mobile Report,
Quarantine Report
Typical reports that can be viewed in the Clients, Threat Log,
Event Log, Scan Log or Tasks tab. |
·
|
Comprehensive Threats Report
Summary of Combined Top Clients with most Threats/ Top Threats;
Combined Top Threats / Threats Comparative Progress; Threats
Progress |
·
|
Comprehensive Network Attacks
Report
Summary of Combined Top Clients with most Network Attacks / Top
Network Attacks; Top Network Attacks; Top Network Attacks Sources;
Network Attacks Progress |
·
|
Comprehensive SMS Spam Report
Summary of Combined Top Clients with most SMS Spam / Top SMS
Spammers; Top SMS Spammers; SMS Spam Progress |
In the Filter section you can use the
Target clients or Threat drop-down menus to select which clients or
viruses will be included in the report.
Other details can be configured by clicking the Additional Settings
button. These settings apply
mostly to data in the heading and in the types of graphical
diagrams used. However, you can also filter data according to the
status of chosen attributes as well as choose which report format
will be used (.html, .csv).
The Interval tab allows you to define an interval for which the
report will be generated:
·
|
Current
Only events which occurred in a chosen time period will be
included in the report e.g., if a report is created on
Wednesday and the interval is set to Current Week, then the events
from Sunday, Monday, Tuesday, and Wednesday will be included.
|
·
|
Completed
Only events which occurred in a chosen, closed period will be
included in the report (i.e., the entire month of August, or
a whole week from Sunday to next Saturday). If the option
Add also the current period is selected,
the report will include events from the last completed period up to
the moment of creation. |
Example:
We want to create a report including events from the last
calendar week, i.e., from Sunday to next Saturday. We want this
report to be generated on the following Wednesday (after
Saturday).
In the Interval tab, select
Completed and 1 Weeks. Remove Add also the
current period. In the Scheduler
tab set Frequency to Weekly and select Wednesday. The other settings can be configured
according to the administrators discretion.
·
|
From / To
Use this setting to define a period for which the report will
be generated. |
The Scheduler tab allows you to define
and configure an automatic report in chosen time or intervals
(Using the Frequency section).
After scheduling the report, click the Select
Target
button to specify where the report is to be saved.
Reports can be saved to ERAS (default), sent via email to a chosen
address, or exported to a folder. The latter option is useful if
the report is sent to a shared folder on your organizations
intranet where it can be can be viewed by other employees.
To send generated reports via email, you need to enter the SMTP
server and sender address information in Tools > Server Options
> Other settings.
To save settings of defined reports to a template, click
the Save or Save
as
buttons. If you are creating a new template, click
the Save as
button and give the template
a name.
At the top of the Console window in the Report templates section, you can see names of
templates that were already created. Next to the template names,
you can find information about time/intervals and when the reports
are generated according to the preset templates. Click the
Generate Now button (make sure the
Options tab is selected) to generate
a report at any moment regardless of the schedule.
Existing report templates can be imported/exported from/to an
.xml file by clicking on the
Import.../Export... button. Name
conflicts during the import (existing and imported template with
the same name) are solved by assigning a random string after the
name of an imported template.
Previously generated reports can be viewed in the Generated Reports tab. For more options, select
individual (or multiple) reports and use the context menu
(right-click).
Templates placed in the Favorites list
can be used later to immediately generate new reports. To move a
template to Favorites, right-click the report and click
Add to Favorites from the context
menu.
|