WSM User Guide - WatchGuard Technologies

Running ReportsDeleting a report filterTo remove a filter from the list of filters, select the filter. Click Delete. This removes the .ftr file fromthe \report-defs directory.Applying a report filterEach report can use only one filter. To apply a filter, open the report properties.1 From Historical Reports, select the report to apply a filter to. Click Edit.2 Use the Filter drop-down list to select a filter.Only if you make a filter in the Filters dialog box will it appear in the drop-down list. For more information, see“Creating a new report filter” on page 192.3 Click OK.Save the new report to the ReportName.rep file in the report-defs directory. When you make the report, the filter isapplied.Running ReportsYou can create one or more reports with Historical Report.1 From Historical Reports, select the check box adjacent to each report that is necessary.2 Click Run.NoteIf the Send a log message with summary information for each transaction check box in yourHTTP proxy action is not selected, you do not see detailed information about HTTP proxiedconnections in your reports.Report Sections and Consolidated SectionsYou can use Historical Reports to create a report with one or more sections. Each section includesa different type of information or network traffic. You can put together specified sections to createa summary. You can then create a report on the event log messages of a group of Firebox®devices.Report sectionsThere are two basic types of Report sections:• Summary — The sections that rank data by bandwidth or connections.• Detailed — The sections that show all traffic and events with no summary graph or rank.A list of the different types of the report sections and the consolidated sections is shown below:Firebox StatisticsA summary of the statistics on one or more log files for one Firebox.Authentication DetailA list of authenticated users in the sequence of connection time. The text boxes include:- Authenticated user- HostUser Guide 193