Are you getting Intrusion Events on the Analysis page? If so, it is pretty straightforward from there to turn it into a report. I would go to the Table View of Events first and then choose the last month (or whatever time period you prefer). then click the Reporting link in the top right. Remove the table you don't want and Generate the report (or save for future use).
