IPS Report

[Rahul_Borah]

Hi all,

I have a small query about the IPS report. I want to generate an IPS report with source any, destination any, and attack details. Kindly guide me on how to modify the report

Regards,

RB

[PhoneBoy]

What's wrong with the default report that already exists?
It should show all IPS events.

[Rahul_Borah]

Hi,
I am searching for source IP and destination IP also in the IPS report. In default report event are showing but i want to include source and destination IP with all the event.

[PhoneBoy]

You can easily change the tables in this report to add that information.
First, create a Clone of the report (select it in the list, then select Actions > Clone).
Next, open the cloned report and select Actions > Edit.
Scroll to the relevant page and click on the Gear icon in the upper right.
Add "Source" and "Destination" as fields. 
If you don't want "Origin" you can simply remove that field.

If you want, you can also leave the rest of the report as-is and add a page to the report with the log entries with whatever details you want.
Add a new page to the end (or wherever), add a table widget to the page, then add in the files shown (or whatever ones you want).
Note the default filter for the report (assuming you cloned the IPS report) already assumes IPS only logs.