Previous Topic: Set Up Analyses

Next Topic: View an Analysis Report

Create an Analysis Report

No Analysis reports are installed by default. A report folder named Analyses exists by default, which you cannot delete. You can store your saved Analysis reports in this folder or you can create other folders to organize your Analysis reports.

Follow these steps:

  1. Select Analysis from the NFA console menu if the Analysis page is not already open.
  2. Select Create New Report.

    The Analysis Wizard opens and displays options for creating an analysis definition or modifying a copy of an existing analysis definition.

  3. Select one of the options, then click Next.
    Create a new analysis

    Define an entirely new Analysis report.

    Copy an existing analysis

    Select an existing report to copy and use as a basis for the new report.

    If you select "Create a new analysis," the Select Interfaces page of the Analysis wizard opens.

  4. Select interfaces or interface groups for the report.
    1. Click one of the following options:
    Add Interface Filter

    Select one or more individual interfaces from the Interface Index.

    Add Interface Group Filter

    Select one or more interface groups from the Interface Group Selection list.

    The selected interfaces are added to the interface list.

    1. Accept the default value or set the Inclusion value for each interface or interface group:
      • ‘Include’ sets the program to use report data from the interface or group.
      • ‘Exclude’ sets the program to eliminate data from the interface or group.
    2. Click Next when you have specified all the interfaces to use for report data.

      The Specify Filters & Threshold page opens.

  5. Specify the settings on the Specify Filters & Threshold page:
    1. (Optional) Specify filters for gathering or excluding report data, then set the Inclusion value for each filter to Include or Exclude:
    Add Protocol Filter

    Select individual protocols from the Protocol Index.

    Add Protocol Group Filter

    Select protocol groups from the Protocol Group Index.

    Add ToS Filter

    Select individual ToS values from the ToS Index.

    Add ToS Group Filter

    Select ToS groups from the ToS Group Index.

    Add Host Filter

    Specify a host IP address and mask.

    Add Conversation Filter

    Identify the IP addresses and mask for each party in the conversation pair.

    1. Accept the default value or set the Inclusion value for each filter you specified:
    Include

    For each filter listed, use only the data of the listed type. For example, use data from the listed protocol group, but not from other protocol groups.

    Exclude

    For each filter listed, do not use the data of the listed type. For example, do not use data from the listed protocol group, but do use data from other protocol groups.

    1. Set the Threshold Settings values to specify the threshold that is used for the Analysis report.
    2. Click Next.

    For example, to report on overutilized interfaces you might specify a threshold to examine total traffic that goes above 70 percent utilization.

  6. Click Next when the report sections are listed correctly in the Added Reports list.

    The Specify Schedule page opens.

  7. Select the type of reporting period from the Period list on the Specify Schedule page:
    Duration

    Limits the reporting period to an amount of time, ending at the time the report runs. Enter the number of time units in the Last box. Select a unit of time from the list (days, weeks, months, or years).

    You can set up a schedule for a Duration report or you can run the report on demand.

    Start and end
    1. Use one of the following methods to specify a Start date and End date:
      • Select the calendar icons and click dates to specify the Start and End of the report period.
      • Select hour and time values from the lists. Hour values are expressed in 24-hour format.
    2. Enter the number of time units in the Resolution box. Select a value from the list for Start and End.

      A Start-and-End report runs on demand. You cannot set up a schedule for a Start-and-End report.

  8. Accept the default Resolution setting on the Specify Schedule page or enter the number of time units in the Resolution box. Select a unit of time from the list (minutes, hours, days, weeks, months, or years).
  9. (Optional) Select a time filter from the list on the Specify Schedule page, if your Administrator has created a time filter that is appropriate for your report.
  10. (Optional) Select the Schedule check box on the Specify Schedule page and specify the following options:
    1. Schedule: Select the type from the Schedule list (Daily, Weekly, Monthly, Quarterly, Yearly).
      • Daily: Select the day or days of the week, time of day, and time zone for report generation.
      • Weekly: Select the day of the week, time of day, and time zone for report generation.
      • Monthly: Select either the date or the week in the month and day of the week. Select the time of day, and time zone for report generation.
      • Quarterly: Select a month that ends the first reporting quarter, time of day, and time zone.
      • Yearly: Select a month that ends the first reporting year, time of day, and time zone.
    2. (Optional) Email Results To: Enter the email addresses of all the report recipients in the format name@domain. Separate multiple addresses with a comma or semi-colon.

    Note: The options in the Recurrence section are available only if you select ‘duration’ as the reporting period type.

  11. Click Next when the Specify Schedule page settings are complete.

    The Enter Name page opens.

  12. Identify the report and its location, then click Next:
    Folder

    Accept the default folder or select a different folder to contain the new report.

    Name

    Give the new report a name that will appear in the Reports list.

    Description

    (Optional) Add a description to help identify the report. For example, you may to use the description to identify scheduled reports and to indicate distinguishing features of Duration reports.

    Additional information about managing Analysis reports is in the topic Manage Analysis Reports.

    The Summary & Submit page opens.

  13. Review the information in the Report Definition Summary.
    Save

    Save the report definition and return to the Custom Reporting page.

    Save and Queue Report

    Queue the report to run and return to the Custom Reporting page.

    Back

    Return to previous pages in the wizard to redefine the report.