Reports tab

The Reports tab is used to turn statistical information into graphs or charts. These can be saved and processed later in the Comma Separated Value format (.csv) by using ERA tools to provide graphs and graphical outputs. By default, ERA saves output in HTML format. Most of the reports related to infiltrations are generated from the Threat log.

1.Dashboard Templates – Templates for the web dashboard reports. A dashboard is a set of reports that is available online using a web browser. The dashboard  layout is fully customizable for each administrator. Double-click a template to display a preview of the report used in the dashboard.

2.Report Templates – Templates for static reports. At the top of the Console window in the Report templates section, you can see the names of templates that were already created. Next to the template names, you can find information about time/intervals and when reports are generated according to the preset templates. You can create new templates, or edit existing predefined templates (shown below):

Clients Overview – Shows the protection statuses of all clients.

Clients with Active Threats – Shows clients with active threats (threats that were not cleaned during the scan) along with information about the active threats.

Comprehensive Network Attacks Report – Shows a comprehensive report about network attack activity.

Comprehensive SMS Report – Shows a comprehensive report about SMS spam activity.

Comprehensive SPAM Report – Shows a comprehensive report about email spam activity.

Comprehensive Threats Report – Shows a comprehensive report about all found threats.

Custom Info Summary – Shows a comprehensive report with user-defined information (needs to be defined first).

Top Problematic Clients – Shows clients with the greatest number of problems (based on the reports above).

Clicking Default Templates will reset the predefined templates to their original state (this action will not affect custom created templates).

Options

Click Generate Now (make sure the Options tab is selected) to generate a report at any moment regardless of the schedule. Select the output type from the drop-down menu next to this option. This defines the file type of the generated report (HTML, ZIP or PDF).

Report

 Type – Type of report based on the predefined templates. It can be modified for predefined templates or selected for the custom created templates. Clicking on ... (next to this option) shows reports that can be used for the Custom Comprehensive report.

 Style – You can modify the color and layout of the report using this drop-down menu.

Filter

 Target clients - You can specify if you want the report to collect All the data or the data from Only Selected Clients/Servers/Groups,or you can Exclude Selected Clients/Servers/Groups. The clients/servers/groups can be specified after clicking ... next to the Target clients drop-down menu in the Add/Remove dialog window.

 Threat – You can also specify if you want the report to show All threats, Only Selected Threats or Exclude Selected Threats. The threats can be specified after clicking ... next to this drop-down menu in the Add/Remove dialog window.

Other details can be configured by clicking Additional Settings… . These settings apply mostly to data in the heading and in the types of graphical diagrams used. However, you can also filter data according to the status of chosen attributes as well as choose which report format will be used (.html, .csv).

Interval

 Current Only events which occurred during a chosen time period will be included in the report, for example, if a report is created on Wednesday and the interval is set to Current Week, then the events from Sunday, Monday, Tuesday, and Wednesday will be included.

 Completed Only events which occurred during a chosen, closed period will be included in the report (for example, the entire month of August, or a whole week from Sunday to next Saturday). If Add also the current period is selected, the report will include events from the last completed period up to the moment of creation.

Example:

We want to create a report including events from the last calendar week, for example, from Sunday to next Saturday. We want this report to be generated on the following Wednesday (after Saturday). In the Interval tab, select Completed and 1 Week. Remove Add also the current period. In the Scheduler tab set the Frequency to Weekly and select Wednesday. The other settings can be configured according to the administrator‘s discretion.

 From / To – Use this setting to define a period for which the report will be generated.

Scheduler

 Frequency – Allows you to define and configure an automatic report for a specified time or in intervals.

After scheduling the report, click Select Target… to specify where the report is to be saved. Reports can be saved to ERAS (default), sent via email to a chosen address, or exported to a folder. The latter option is useful if the report is sent to a shared folder on your organization‘s intranet where it can be can be viewed by other employees. If you use this option, select the output file type (HTML, ZIP or PDF). You can use variables (%) in the path of the folder. Variables are not case sensitive. These variables add custom info to the generated report. If you end the folder path with the "\" symbol, reports are written directly into this folder and data is overwritten. The following variables are supported:

Variable

Description

%INTERVAL%

The interval for which the report is being generated, as returned from CReport::GetIntervalString(INTERVALSTRING_FOLDER).

%DATE%

Current date ("YYYY-MM-DD").

%TIME%

Current time ("HH-MM-SS").

%DATETIME%

Current date and time ("YYYY-MM-DD HH-MM-SS").

%TIMESTAMP%

Current date and time, unixtime in hex, 8 digits.

%RND4%

Random value, 4 hex digits, almost unique (not recommended).

%DDATE%

Current date, dense ("YYYYMMDD").

%DTIME%

Current time, dense ("HHMMSS").

%YEAR%, %MONTH%, %DAY%, %HOUR%, %MINUTE%, %SECOND%

Current date / time parts as digits (4 for year, 2 for others).

%COUNTER%

5-digit decimal counter, beginning at 1.

%COUNTER1%, %COUNTER2%, %COUNTER3%, %COUNTER4%, %COUNTER5%

1/2/3/4/5-digit decimal counter, beginning at 1.

%CCOUNTER%

5-digit decimal conditional counter (1st iteration is erased, 2nd iteration is "00002")

%CCOUNTER1%, %CCOUNTER2%, %CCOUNTER3%, %CCOUNTER4%, %CCOUNTER5%

1/2/3/4/5-digit decimal conditional counter.

%UCOUNTER%

5-digit decimal underscore counter (1st iteration is erased, 2nd iteration is "_00002")

%UCOUNTER1%, %UCOUNTER2%, %UCOUNTER3%, %UCOUNTER4%, %UCOUNTER5%

1/2/3/4/5-digit decimal underscore counter.

%%

Single % sign.

For example, if you enter the path in the form : C:\Reports\%INTERVAL%_%COUNTER%", the folder names will be generated as C:\Reports\Day 2012-02-02_00001; C:\Reports\Day 2012-02-02_00002 and so on.

To send generated reports via email, you need to enter the SMTP server and sender address information in Tools > Server OptionsOther settings.

3.Generated Reports – Previously generated reports can be viewed in the Generated Reports tab. For more options, select individual (or multiple) reports and use the context menu (right-click). You can sort the reports by the Report Name, the Date the report was generated, the Template Name and the Location of the report. Click Open or double-click a report in the list to open the report. Clicking a report in the list will show  a preview in the lower section (if this option is selected).

Templates placed in the Favorites list can be used later to immediately generate new reports. To move a template to Favorites, right-click the report and select Add to Favorites from the context menu.