Opening a View or Report

Use the predefined graphical views and reports for the most frequently seen security issues. You can also customize the views and reports.

To open a view or report:

1. In SmartConsole, open the Logs & Monitor view.
2. Click the + icon to open a new catalog.
3. Click Views or Reports.
4. Select a view or a report, and click Open. You can also double click to open it.
5. Define the required timeframe, and filter in the search bar.
6. Click Enter.

Exporting Views and Reports

The Export to PDF and Export to Excel options save the current view or report as a PDF or Excel file, based on the defined filters and time frame.

To export a view or report to PDF or Excel:

1. In SmartConsole, open the Logs & Monitor view.
2. Click the + tab to open a new tab.
3. Click Views or Reports.
4. Select a view or report.
5. Click Export to PDF. Optionally:
   • Configure the Period and filter.
   • To automatically send by email to specified recipients each time the view or report runs, configure the Send by email settings

   Alternatively, click Open and from inside the view or report click Options > Export to PDF or Export to Excel.

   

To see your exported views and reports:

1. Add a new tab. Click +.
2. Go to Tasks > Archive.

Generating a Network Activity Report

The Network Activity report shows important firewall connections. For example, top sources, destinations, and services. To create this report, SmartEvent must first index the firewall logs. Indexing is on by default in R80 and higher, in all environments except for Stand Alone.

To enable the Network Activity Report for R80.10 and higher Gateways:

In SmartConsole, in the Access Control Policy rule, add per Session to the Track settings.

To enable the Network Activity Report for Pre-R80.10 Gateways:

1. In SmartConsole, open the Logs & Monitor view.
2. Click the (+) to open a Catalog (new tab).
3. In the External Apps section, click SmartEvent Settings & Policy link.
4. In the SmartEvent GUI client > Policy tab, select and expand Consolidated Sessions.
5. Select Firewall Session.

   Note - this configuration increases the number of events per day by about five times. To avoid a performance impact, make sure the hardware can handle the load.