The Executing Investigation Playbook dialog box appears:
This dialog box only appears when you generate this report for the first time.
Optionally, in the Executing Investigation Playbook dialog box (which shows the status of the report generation), click View Trace Log.
The Trace Log shows the report generation log. You can use this log to troubleshoot any report generation errors.
The Choose Source dialog box appears:
This dialog box only appears when this report has previously been generated.
You can do either of the following:
Leave the default setting selected (Execute Investigation Playbook Now) and click OK.
This option runs the associated Investigation Playbook and generates a report.
Select Use Existing Task, and in the Task drop-down menu, select which previously generated report you want to view. Click OK.
This option lets you view historical reports.
The report appears on a new tab in your web browser and in the EDR cloud console console in Tasks.
To view reports in your web browser, ensure that your browser permits pop-ups from the EDR cloud console.
To generate a report for an appliance
Do one of the following:
In the EDR cloud console, click Reports. Then under Environment, select the appliance that you want to run the report for.
In the EDR appliance console, click Reports.
Hover over the report that you want to run, and then click Run.
You can only run the Executive Report or Incident Details report on demand.
On the report dialog box, specify the following information:
Type a name for this report.
If you are running the Incident Details Report, type the incident number for which you want to run the report.
Type the email addresses of the recipients to whom you want to send a PDF copy of the report. Separate multiple email addresses with a semicolon (;).
These recipients only need a valid email address; they do not need to be part of your organization.
Your email address automatically appears in this field. However, you can change it or delete it.
Some SMTP servers limit the number of emails that a user can send per day or the number of recipients per message. So you might want to restrict the number of recipients or use an email distribution list instead.