Cisco Security Agent

Chapter 9. Using CSA MC Reports

This chapter covers the following topics:

• Audit trail reporting

• Event reporting

• Group detail reporting

• Host detail reporting

• Policy detail reporting

• Report viewing

• Creating a sample report

Chapter 8, “Monitoring CSA Events,” covered using the event log to provide the insight needed to manage your CSA deployment. The historical and near real-time views into the event database provide much of what you need when responding to security issues, alerting necessary parties, tuning the initial deployment, and developing future policy based on historical endpoint usage information. To most efficiently use the reporting feature of the CSA MC, it is necessary to understand how to efficiently use event sets, because they are the ...