Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Rahul_Borah
Contributor

IPS Report

Hi all,

 

I have a small query about the IPS report. I want to generate an IPS report with source any, destination any, and attack details. Kindly guide me on how to modify the report

 

Regards,

RB

0 Kudos
3 Replies
PhoneBoy
Admin
Admin

What's wrong with the default report that already exists?
It should show all IPS events.

Screen Shot 2020-06-07 at 8.59.00 PM.png

0 Kudos
Rahul_Borah
Contributor

Hi,
I am searching for source IP and destination IP also in the IPS report. In default report event are showing but i want to include source and destination IP with all the event.
0 Kudos
PhoneBoy
Admin
Admin

You can easily change the tables in this report to add that information.
First, create a Clone of the report (select it in the list, then select Actions > Clone).
Next, open the cloned report and select Actions > Edit.
Scroll to the relevant page and click on the Gear icon in the upper right.
Add "Source" and "Destination" as fields. 
If you don't want "Origin" you can simply remove that field.

Screen Shot 2020-06-19 at 2.18.26 PM.png

If you want, you can also leave the rest of the report as-is and add a page to the report with the log entries with whatever details you want.
Add a new page to the end (or wherever), add a table widget to the page, then add in the files shown (or whatever ones you want).
Note the default filter for the report (assuming you cloned the IPS report) already assumes IPS only logs. 

Screen Shot 2020-06-19 at 2.30.38 PM.png

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events