cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

1264
Views
0
Helpful
2
Replies
Highlighted
Beginner

MARS - firewall log analysis

I have 200 Cisco Firewalls. For doing Log analysis i am planning to use Cisco Mars. I need to get the report for Deny ip's list on weekly basis to my mail id from the Cisco Mars. Could any one help me on this. I already configured the Mars for this requirement. But i am getting the reports daily,that too the reports for not full day . I can see the reports for 2-3 Mins..

Could anyone share the procedure for generating the reports on weekly basis.

Everyone's tags (4)
2 REPLIES 2

Re: MARS - firewall log analysis

You can set the time span for the report when you configure them.

Have you been able to solve this issue? Let me know if you need any help.


Regards

Farrukh

Beginner

Re: MARS - firewall log analysis

Thanks for your response Farrukh!!!

I have configured the sheduled report like below,

Query/Reports  ----> Report ----> Add ---> Shedule

In this, I have selected weekly logs and view type will be CSV format. But still getting the
same error.


Also , Under the query option ---> Filter by time : Could you please clarify which option should i select.Here i tried with all the options almost , But still it is not coming up.

Hope except these above options no other way to specify the time range..

Thanks

Magesh