To view generated reports for the cloud environment
After a report for the cloud environment is initially generated, it appears as a separate page in your web browser. It also appears on the EDR cloud console Tasks page. Follow these steps to view a report that has been previously generated.
In EDR cloud console click Reports. Then under Environment, click Cloud.
In the Report Templates pane, search for a report in the Search field. You can also drill down through the Library to find the report template that you want to use.
To drill down the Library to locate the report template that you want to use, do the following:
Click Built In to display the report templates at this directory level.
To view templates in directories, click the folder icon beside Built In.
Folders with solid icons contain subdirectories. Click on any of these subdirectories to view their folders.
Tip: Click the opposing arrows icon beside Library to open all directories and subdirectories.
Under Report Templates, hover over the report that you want to view.
A play icon appears to right of the row.
Click the Generate Report icon.
In the Choose Source dialog box, select Use Existing Task, and in the Task drop-down menu, select which previously generated report you want to view. Click OK.
The report appears on a new tab in your web browser and in the EDR cloud console console in Tasks.
To view reports in your web browser, ensure that your browser permits pop-ups from the EDR cloud console.
Optionally, in the Executing Investigation Playbook dialog box (which shows the status of the report generation), click View Trace Log.
The Trace Log shows the report generation log. You can use this log to troubleshoot any report generation errors.
To view generated reports for an appliance
Do either of the following:
In the EDR cloud console, click Reports. Then under Environment, select the appliance that contains the generated report that you want to view. .
In the EDR appliance console, click Reports.
On the Reports screen, hover over the report type, and then click View.
Reports appear in the console in the order in which they are run, with the most recently-generated report first.
Generated reports appear in the Reports table, which consists of the following information:
The name of the report.
The user who ran the report on-demand, or created the report schedule.
Last Run Date/Time
The date and UTC time on which the report last ran.
Whether or not (Yes or No) the report was generated from a report schedule. (If No, the report was run on-demand.)
This field does not appear for Exports Reports.
The current execution state of the report. These include:
The report is currently running.
The report is in the queue to run. This status typically means that multiple reports are scheduled to run at the same time, and that another report is currently running.
The report encountered an error while it was running and cannot complete.
Completed with error
The report generated, but it encountered one or more errors. The error(s) are listed in the report, except reports in .csv format. An example of when this error appears is when the number of records being returned exceeds the allowed maximum of 10,000.
The report generated with no errors.
Additional information about the report. For the Incident Details Report, the Incident Number appears.
Hover over the completed report that you want to download, and then click the Download icon.
Your browser prompts you to save the file or view it.
Reports are generated in PDF format, so you must have a PDF viewer program to view it.