Reports

This section describes how to use reports, manage custom report templates, use report templates to generate new reports, and create report delivery tasks.

Using reports

The Reports feature allows you to get detailed numerical information about the security of your organization's network, save this information to a file, send it by email, and print it.

Reports are available in the Kaspersky Security Center 13.1 Web Console, in the MONITORING & REPORTING section, by clicking REPORTS.

By default, reports include information for the last 30 days.

Kaspersky Security Center has a default set of reports for the following categories:

• Protection status
• Deployment
• Updating
• Threat statistics
• Other

You can create custom report templates, edit report templates, and delete them.

You can create reports that are based on existing templates, export reports to files, and create tasks for report delivery.

Creating a report template

To create a report template:

1. In the main menu, go to MONITORING & REPORTING → REPORTS.
2. Click Add.

   The New Report Template Wizard starts. Proceed through the Wizard by using the Next button.

3. On the first page of the Wizard, enter the report name and select the report type.
4. On the Scope page of the Wizard, select the set of client devices (administration group, device selection, selected devices, or all networked devices) whose data will be displayed in reports that are based on this report template.
5. On the Reporting period page of the Wizard, specify the report period. Available values are as follows:
   • Between the two specified dates
   • From the specified date to the report creation date
   • From the report creation date, minus the specified number of days, to the report creation date

   This page may not appear for some reports.

6. Click OK to close the Wizard.
7. Do one of the following:
   • Click the Save and run button to save the new report template and to run a report based on it.

     The report template is saved. The report is generated.

   • Click the Save button to save the new report template.

     The report template is saved.

You can use the new template for generating and viewing reports.

Viewing and editing report template properties

Expand all | Collapse all

You can view and edit basic properties of a report template, for example, the report template name or the fields displayed in the report.

To view and edit properties of a report template:

1. In the main menu, go to MONITORING & REPORTING → REPORTS.
2. Select the check box next to the report template whose properties you want to view and edit.

   As an alternative, you can first generate the report, and then click the Edit button.

3. Click the Open report template properties button.

   The Editing report <Report name> window opens with the General tab selected.

4. Edit the report template properties:
   • General tab:
     • Report template name
     • Maximum number of entries to display

       If this option is enabled, the number of entries displayed in the table with detailed report data does not exceed the specified value.

       Report entries are first sorted according to the rules specified in the Fields → Details fields section of the report template properties, and then only the first of the resulting entries are kept. The heading of the table with detailed report data shows the displayed number of entries and the total available number of entries that match other report template settings.

       If this option is disabled, the table with detailed report data displays all available entries. We do not recommend that you disable this option. Limiting the number of displayed report entries reduces the load on the database management system (DBMS) and reduces the time required for generating and exporting the report. Some of the reports contain too many entries. If this is the case, you may find it difficult to read and analyze them all. Also, your device may run out of memory while generating such a report and, consequently, you will not be able to view the report.

       By default, this option is enabled. The default value is 1000.

     • Group

       Click the Settings button to change the set of client devices for which the report is created. For some types of the reports, the button may be unavailable. The actual settings depend on the settings specified during creation of the report template.

     • Time interval

       Click the Settings button to modify the report period. For some types of the reports, the button may be unavailable. Available values are as follows:

       • Between the two specified dates
       • From the specified date to the report creation date
       • From the report creation date, minus the specified number of days, to the report creation date
     • Include data from secondary and virtual Administration Servers

       If this option is enabled, the report includes the information from the secondary and virtual Administration Servers that are subordinate to the Administration Server for which the report template is created.

       Disable this option if you want to view data only from the current Administration Server.

       By default, this option is enabled.

     • Up to nesting level

       The report includes data from secondary and virtual Administration Servers that are located under the current Administration Server on a nesting level that is less than or equal to the specified value.

       The default value is 1. You may want to change this value if you have to retrieve information from secondary Administration Servers located at lower levels in the tree.

     • Data wait interval (min)

       Before generating the report, the Administration Server for which the report template is created waits for data from secondary Administration Servers during the specified number of minutes. If no data is received from a secondary Administration Server at the end of this period, the report runs anyway. Instead of the actual data, the report shows data taken from the cache (if the Cache data from secondary Administration Servers option is enabled), or N/A (not available) otherwise.

       The default value is 5 (minutes).

     • Cache data from secondary Administration Servers

       Secondary Administration Servers regularly transfer data to the Administration Server for which the report template is created. There, the transferred data is stored in the cache.

       If the current Administration Server cannot receive data from a secondary Administration Server while generating the report, the report shows data taken from the cache. The date when the data was transferred to the cache is also displayed.

       Enabling this option allows you to view the information from secondary Administration Servers even if the up-to-date data cannot be retrieved. However, the displayed data can be obsolete.

       By default, this option is disabled.

     • Cache update frequency (h)

       Secondary Administration Servers at regular intervals transfer data to the Administration Server for which the report template is created. You can specify this period in hours. If you specify 0 hours, data is transferred only when the report is generated.

       The default value is 0.

     • Transfer detailed information from secondary Administration Servers

       In the generated report, the table with detailed report data includes data from secondary Administration Servers of the Administration Server for which the report template is created.

       Enabling this option slows the report generation and increases traffic between Administration Servers. However, you can view all data in one report.

       Instead of enabling this option, you may want to analyze detailed report data to detect a faulty secondary Administration Server, and then generate the same report only for that faulty Administration Server.

       By default, this option is disabled.

   • Fields tab

     Select the fields that will be displayed in the report, and use the Move up button and Move down button to change the order of these fields. Use the Add button or Edit button to specify whether the information in the report must be sorted and filtered by each of the fields.

     In the Filters of Details fields section, you can also click the Convert filters button to start using the extended filtering format. This format enables you to combine filtering conditions specified in various fields by using the logical OR operation. After you click the button, the Convert filters panel opens on the right. Click the Convert filters button to confirm conversion. You can now define a converted filter with conditions from the Details fields section that are applied by using the logical OR operation.

     Conversion of a report to the format supporting complex filtering conditions will make the report incompatible with the previous versions of Kaspersky Security Center (11 and earlier). Also, the converted report will not contain any data from secondary Administration Servers running such incompatible versions.

5. Click Save to save the changes.
6. Close the Editing report <Report name> window.

The updated report template appears in the list of report templates.

Exporting a report to a file

You can export a report to an XML, HTML, or PDF file.

To export a report to a file:

1. In the main menu, go to MONITORING & REPORTING → REPORTS.
2. Select the check box next to the report that you want to export to a file.
3. Click the Export report button.
4. In the window that opens, change the report file name in the Name field. By default, the file name coincides with the name of the selected report template.
5. Select the report file type: XML, HTML, or PDF.
6. Click the Export report button.

   The report in selected format will be downloaded to your device—to the default folder of your device—or a standard Save as window in your browser will open to let you save the file where you want.

The report is saved to the file.

Generating and viewing a report

To create and view a report:

1. In the main menu, go to MONITORING & REPORTING → REPORTS.
2. Click the name of the report template that you want to use to create a report.

A report using the selected template is generated and displayed.

Report data is displayed according to the localization set for the Administration Server.

The report displays the following data:

• On the Summary tab:
  • The name and type of report, a brief description and the reporting period, as well as information about the group of devices for which the report is generated.
  • Graph chart showing the most representative report data.
  • Consolidated table with calculated report indicators.
• On the Details tab, a table with detailed report data is displayed.

Creating a report delivery task

You can create a task that will deliver selected reports.

To create a report delivery task:

1. In the main menu, go to MONITORING & REPORTING → REPORTS.
2. [Optional] Select the check boxes next to the report templates for which you want to create a report delivery task.
3. Click the New report delivery task button.
4. The Add Task Wizard starts. Proceed through the Wizard by using the Next button.
5. On the first page of the Wizard, enter the task name. The default name is Deliver reports (<N>), where <N> is the sequence number of the task.
6. On the task settings page of the Wizard, specify the following settings:
   1. Report templates to be delivered by the task. If you selected them at step 2, skip this step.
   2. The report format: HTML, XLS, or PDF.
   3. Whether the reports are to be sent by email, together with email notification settings.
   4. Whether the reports are to be saved to a folder, whether previously saved reports in this folder are to be overwritten, and whether a specific account is to be used to access the folder (for a shared folder).
7. If you want to modify other task settings after the task is created, on the Finish task creation page of the Wizard enable the Open task details when creation is complete option.
8. Click the Create button to create the task and close the Wizard.

   The report delivery task is created. If you enabled the Open task details when creation is complete option, the task settings window opens.

Deleting report templates

To delete one or several report templates:

1. In the main menu, go to MONITORING & REPORTING → REPORTS.
2. Select check boxes next to the report templates that you want to delete.
3. Click the Delete button.
4. In the window that opens, click OK to confirm your selection.

The selected report templates are deleted. If these report templates were included in the report delivery tasks, they are also removed from the tasks.