Skip to main content
Skip table of contents

UAE-NESA User Guide – Reports and Reporting Packages

UAE-NESA reporting is broken into summary and detailed reports in order to present various audiences with appropriate forensic log data. Summary reports provide a higher level of information that may be appropriate for some audit and executive management requests. On the other hand, detailed reports provide additional information and, in some reports, raw log data to facilitate IT Security and Operations. Keep in mind any report can be run as an investigation to deep-dive into forensic information around the activity of interest.

Reporting packages can be easily created or adjusted by a LogRhythm Admin to provide needed content for Audit, Executive Management, or other audiences who require output for assessment.

Create a Reporting Package

You must be logged in as an Administrator to take this action.

  1. On the main toolbar of the Client Console, click Report Center.
  2. Click the Report Packages tab.
  3. Right-click the grid and click New Report Package.
  4. Within the Select Reports window, select the CCF reports you want to include in this reporting package, and then click Next.
  5. On the Override Log Source Criteria, click Next without making any changes.

    Do not override log source criteria.

  6. Select the frequency and timeframe in which the reporting package will be produced.
  7. Configure additional settings for report delivery options, and then click Next.

  8. Add the name and description of the new UAE-NESA reporting package, and then click OK.

Clone a Reporting Package

  1. On the main toolbar, click the Report Center.
  2. Click the Report Packages tab.
  3. Right-click the report package you want, and then click Clone.
  4. Ensure the reports you want are selected within the report package.
  5. Click Next until you reach the Override Log Source Criteria.
  6. Select Selected Log Source List and type UAE-NESA in the Name search field.
  7. Select the UAE-NESA: All Log Sources box.
  8. Select Next until you reach Package Details, and then change the Package Name.
  9. Set Report Package Permissions, and then click OK.
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.