The way that you view a generated Symantec Endpoint Detection and Response report differs depending on whether you generate the report for an appliance or for the cloud environment.

To view generated reports for the cloud environment | To view generated reports for an appliance

To view generated reports for the cloud environment

After a report for the cloud environment is initially generated, it appears as a separate page in your web browser. It also appears on the EDR cloud console Tasks page. Follow these steps to view a report that has been previously generated.

See Generating reports.

See Viewing your Tasks in the EDR cloud console.

  1. In EDR cloud console click Reports. Then under Environment, click Cloud.

  2. In the Report Templates pane, search for a report in the Search field. You can also drill down through the Library to find the report template that you want to use.

    To drill down the Library to locate the report template that you want to use, do the following:

    • Click Built In to display the report templates at this directory level.

    • To view templates in directories, click the folder icon beside Built In.

    • Folders with solid icons contain subdirectories. Click on any of these subdirectories to view their folders.

    Tip: Click the opposing arrows icon beside Library to open all directories and subdirectories.

  3. Under Report Templates, hover over the report that you want to view.

    A play icon appears to right of the row.

  4. Click the Generate Report icon.

  5. In the Choose Source dialog box, select Use Existing Task, and in the Task drop-down menu, select which previously generated report you want to view. Click OK.

    The report appears on a new tab in your web browser and in the EDR cloud console console in Tasks.

    To view reports in your web browser, ensure that your browser permits pop-ups from the EDR cloud console.

  6. Optionally, in the Executing Investigation Playbook dialog box (which shows the status of the report generation), click View Trace Log.

    The Trace Log shows the report generation log. You can use this log to troubleshoot any report generation errors.

To view generated reports for an appliance

  1. Do either of the following:

    • In the EDR cloud console, click Reports. Then under Environment, select the appliance that contains the generated report that you want to view. .

    • In the EDR appliance console, click Reports.

  2. On the Reports screen, hover over the report type, and then click View.

    Reports appear in the console in the order in which they are run, with the most recently-generated report first.

    Generated reports appear in the Reports table, which consists of the following information:

    Report Name

    The name of the report.

    Created By

    The user who ran the report on-demand, or created the report schedule.

    Last Run Date/Time

    The date and UTC time on which the report last ran.

    Scheduled

    Whether or not (Yes or No) the report was generated from a report schedule. (If No, the report was run on-demand.)

    This field does not appear for Exports Reports.

    Status

    The current execution state of the report. These include:

    • Running

      The report is currently running.

    • Queue

      The report is in the queue to run. This status typically means that multiple reports are scheduled to run at the same time, and that another report is currently running.

    • Failed

      The report encountered an error while it was running and cannot complete.

    • Completed with error

      The report generated, but it encountered one or more errors. The error(s) are listed in the report, except reports in .csv format. An example of when this error appears is when the number of records being returned exceeds the allowed maximum of 10,000.

    • Completed

      The report generated with no errors.

    Other information

    Additional information about the report. For the Incident Details Report, the Incident Number appears.

  3. Hover over the completed report that you want to download, and then click the Download icon.

    Your browser prompts you to save the file or view it.

    Reports are generated in PDF format, so you must have a PDF viewer program to view it.

See Generating reports.

See About Reports

Legacy ID: v116673243_v128921691

Thanks for your feedback. Let us know if you have additional comments below. (requires login)

    © 1995-2019 Symantec Corporation