The “Report management” module is located in the “Users and statistics” menu. This module allows to manage and configure the services “Statistics” and “Counters”, and also allows to establish these services reports either in default forms or custom ones. This module contains tabs: “Reports management”, “Reports constructor”, “Services”, “Settings”, “Log”.
The “Reports management” tab is divided into two windows. In first you can see the list of all the reports - created by system and by ICS Administrator user. In the second the chosen report is viewed. Default reports cannot be edited or deleted. To add a new report press the “Add” button (the tab “Report constructor” will be opened), to delete - the “Delete” button, to edit - the “Edit” button (the report will be opened in the “Report constructor” tab with the fields filled with appropriate for this report values).
Also on this tab you can find the time period for the information shown in the report (the 30.07.18 will be used as an example of the current date): “Today” (the report for 30.07.18 will be shown), “Week” (the report for the period 30.07.18-05.08.18 will be shown), “Month” (the report for the period 01.07.18-31.07.18 will be shown), “Other period” (you need to specify the period for which the report will be shown).
You can use the “Export” button to export the report to one of the following formats: *.csv, *.txt, *.xls. Please, note, that the pie charts will be exported as tables.
The “Reports constructor” tab allows to create reports using the filter parameters that can be applied to general statistics in any combination to show the required statistics data. The main “Reports constructor” window is divided in two. First is for parameters of filters settings, as can be seen in the table:
|Name||This field is enabled when you edit previously created report. Allows to change the report’s name.|
|Type||Allows to set one of the four possible types of view: “HTTP detalization”, “IP detalization”, “Table”, “Pie chart”. “HTTP detalization” will show a table with HTTP/HTTPS traffic statistics, gathered from proxy-server. “IP detalization” will show a table with statistics for all the connections that went through ICS CUBE, by IP-address. “Table” will show chosen data as a table. Pie chart will show chosen data as a pie chart.|
|Grouping||This function groups all the shown data by chosen principle in the second window. Grouping can be: by destination, by source, by interface, by ip-addresses and domains, by protocols, by ports, by mime-types, by timestamp. Also you can set additional grouping for them. If the report view will be table, you can group them by several criteria. Grouping will be performed as following: first tree level will be grouped by first value of the field, second level by second value etc. Grouping is the only one mandatory parameter in report creation.|
|Source||Allows to filter grouped statistics by their source. You can set an address range or ip-address that exists in ICS CUBE, in this field.|
|Destination||Allows to filter grouped statistics by destination. You can set an address range or ip-address that exists in ICS CUBE, in this field.|
|Interface||Allows to filter grouped statistics by interface, that exists in the ICS CUBE. You can choose tunnels, DMZ, VPN, external and internal interfaces in this field.|
|IP-address or domain||Allows to filter grouped statistics by IP-address or domain.|
|Protocol/port||First field allows to filter grouped statistics by one of the protocols (IP, ICMP, TCP, UDP, GRE, IPIP, L2TP). Second field allows to filter grouped statistics by port: ICS CUBE service port, well-known port or any other.|
|Mime-type||Allows to filter grouped statistics by one of the pre-set mime-types.|
|Result||Allows to filter grouped statistics by reply code from the external web-server.|
|Time (from … to)||Allows to filter grouped statistics to match only a certain time period, in hours.|
After all the necessary filters are chosen and the “View” button is pressed, you will be able to see the report in the second window. If it is a table report, you will be able to show and hide columns, manage the order and format of the data, like it happens in other tables in ICS CUBE interface. To save the chosen filters combination and use it in future without setting it up again, you need to press the “Save the report” button. ICS CUBE will suggest to choose report category (“General report” or “Users report”), then to enter the report’s name and then will save it among other standard reports. Created report will be available on the “Reports management” tab.
The data, filtered from the detailed statistics in the report, can be exported in a file (.csv, .txt, .xls), and this way will be available for printing. When one of the formats will be chosen, a new window “Settings” window will be open where you can set export parameters (“Export all the pages”, “Export as a tree” with an opportunity to choose the level of details in a tree). Also on this tab you can choose the time period for the report (in this example the current date will be 30.07.18): “Today” (report for the 30.07.18), “Week” (report for the 30.08.18-05.08.18), “Month” (report for the 01.07.18-31.07.18), “Other period” (you will need to choose the period). It should be noted that pie charts will be transformed into tables for export.
On this tab you can see statuses of the services “Statistics” and “Counters” - enabled or disabled. Also on this tab you can find the event log for the current date.
The “Settings” tab allows to set parameters for view and storing of the logs of these services. In the “Users for which URL shouldn’t be shown” you can set users or/and groups of users for which the URLs of the visited pages won’t be shown in reports. In the report you will see the “hidden.url” in such case for all the URLs. It should be noted that this setting will be applied only to newly gathered statistics. If the “Log firewall blocking” will be set, then in a report you will see what was blocked by the firewall. To view them, in the “Reports constructor tab” choose: in the “view” field - “IP detalization”, in the “result” field - “403 Forbidden”. If the “Traffic categories report” checkbox is marked, then for reports of the “HTTP detalization” type there will be a category for each URL. The “Automatic removal” block allows to set the time period or quota for storing the statistics and detailed statistics. Also those parameters can be set in the Menu - System - Data removal.
The “Log” tab shows all the system messages of the module with a timestamp. Log is divided into pages, you can navigate through them using the “Next” and “Previous” buttons, or enter the required page number in the appropriate field. Log messages are marked by color depending on their type. Normal system messages are white, system status messages (enabling/disabling, user connection) are green, warnings are yellow and errors are red. In the top right corner of the module there is a search line. Also there is an opportunity to choose the period for which the log will be shown. By default log is showing events for the current date. If needed, the log can be saved into a file by using the “Export” button, and removed for a period with “Remove logs” button.