Scheduled reporting in RDS The RDS portal user can configure daily, weekly and monthly reports on detections perceived in the monitored IT environment. The reports contain information about detections, sensors and the threat intelligence from public honeypots.
Each report includes an overview page showing the trend for all detections in different detection states (Confirmed, Unconfirmed and False Positive), and a summary of all Endpoint, Network and Honeypot sensor detections reported by the Rapid Detection and Response Center (RDC) analysts during the reporting period. Also, the amount of sensors that have been seen online during the past 24 hours, 7 days or 30 days is included in the reports.
Attention: Reports include potentially sensitive information, such as hostnames and detection descriptions, so bear this aspect in mind before sharing downloaded reports as email attachments.
Reports are downloaded from the portal and portal users can create as many scheduled reports as they need.
To create a new report:
- Click the Add new link to open the Scheduled report setup page.
- Type in the report name (for example, Weekly report).
- Select how often you want to schedule the report. By default, the frequency is "Weekly".
- Select the timezone used.
This setting affects the data included in the report. It also determines the dates and times used in the report.
- Select the content you want included in the report. By default, all the predefined content is included.
- Click Save.
Table 1. More about scheduled reports| Type of report | When available | Length stored |
|---|
| Daily report | The following day | Two weeks |
| Weekly report | Mondays for the previous week | Two months |
| Monthly report | 1st day of the month for the previous month | Six months |
Each report also contains a section "How to read this report", which helps in reading and understanding the RDS report.