In this video, I'd like to walk you through working with charts.
And we could use one of the many predefined charts as part of our templates and
reports,
or we could create our own charts as well.
So we'll go down to the 40 Analyzer and let me walk you through working with
charts.
And here we go.
So back at the 40 Analyzer on the left-hand side, we'll go down to reports.
We'll click on report definitions.
And then we'll choose this tab right here called the chart library.
So in the bottom right-hand corner, showing as of this recording that we have 1
,809 charts WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
,809 charts
to pull from, so we probably don't need to create any new custom charts.
However, if we did, we can, or we could take one of our charts, clone it, and
then go
ahead and start editing and tweaking that chart.
So let's grab one of the existing charts.
In fact, we can do a few options and say, just show the built-in ones or the
ForteGuard ones
and not show you the customer vice versa.
So currently we don't have any custom charts, so this should be empty.
And we do have some built-in and ForteGuard charts. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And we do have some built-in and ForteGuard charts.
And there they are.
So let's put a filter in place and I'm going to put in the search filter up
here.
I'm going to type in avoidance, press enter.
And there's no charts.
By default, they have the word avoidance in them.
So let's just grab an existing chart.
How about this right here?
360 degree, threats, detection, and prevention.
So we'll double click on that.
And here are the details for that chart.
It's also showing us a preview with sample data.
But the cool thing is this, if you wanted to see based on your current SQL
database,
some of the real data and verify that it can be populated here, what we could WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
some of the real data and verify that it can be populated here, what we could
do is instead
of going to sample data, go to real data, and then specify, I'm going to
specify for
this demo this entire year.
And then we'll include everything, including stuff I might have done three or
four weeks
ago.
And then I'll click on go to retrieve that.
And we'll see if we have any data that is populated here.
Fantastic.
So this is my actual graphic here, this chart based on my real data, critical
and high intrusion
attacks, malware and botnet, and malicious and phishing.
So I'm going to go ahead and close that. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So I'm going to go ahead and close that.
And we'll walk you through creating your own custom chart.
So to do that with the chart library tab selected here, we can click on create
new to create
a new chart.
And let's call this our proxy avoidance chart.
And then for the data set, because that's what's going to use to pull the data
in, we
actually made a custom data set looking for proxy avoidance.
So we can go ahead and use that.
So it's right here, I just put in proxies and filter our data set looking for
proxy avoidance.
And then for the type, we can specify table, bar, pie, line, area, et cetera.
So let me go ahead and just do a table. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So let me go ahead and just do a table.
And then over here, what we could do is we want to test it.
We could instead of using sample data, say I want to use real data.
And then I'm going to specify for this year, stuff like that.
And we'll click on go.
And sure enough, that means our data set, which we already tested is working.
And it can be included as part of this chart here.
Our proxy avoidance chart, and in this working, we also play around with the
various types.
So table, bar, pie, line, et cetera.
And make sure we have the type of output in this chart that we want.
And then for the columns, we have source IP, host name, and category WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And then for the columns, we have source IP, host name, and category
description.
And those are based on the data set as far as what data is being pulled in.
So we'll click on OK.
And then let's go to view options and we'll just look at the custom chart
library.
And there it is.
So our proxy avoidance chart is leveraging our custom data set.
So if we ran a report, in fact, let's go to all reports and we just go ahead
and use
the dropdown, create new.
We'll call that test proxy avoidance report.
And we haven't created a template yet, so we can't pull from a template. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And we haven't created a template yet, so we can't pull from a template.
However, we could just go ahead and click on OK.
And that would give us an opportunity to change the settings for the report.
For example, how far do we want to go back?
So I'll say this year, we could also schedule this to run periodically.
We can enable notifications and also enable the auto cache, which would make it
run faster
than having to dynamically pull all the data at the time the report is run.
Think of auto cache as a preemptive way to speed up reports, although it is
going to
take some additional CPU on our 40 analyzer.
So if we go to editor here and currently because we didn't pull from a template WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So if we go to editor here and currently because we didn't pull from a template
, we
don't have anything as far as the output here, let's go ahead and insert a new
chart.
So we'll click right here on the insert chart icon.
And then after a moment here, it's going to prompt us for which one.
So let's go ahead and use the dropdown.
I think the word hour was in it.
So we scroll down, there's our proxy avoidance chart.
We'll select that and we'll click on OK.
So it's going to be a little boring.
We'll have one little table here that we're now including in this new custom
reports.
We'll click on apply and then we'll click on return.
And then for the reports here, I'm going to click on hour. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And then for the reports here, I'm going to click on hour.
And I guess it didn't put an hour in that.
Let me go ahead and type in proxy.
And there it is.
Test proxy avoidance report.
That's when we just made.
So we can select that right click and go ahead and simply run the report.
So in the background, it's running.
We could go to generated reports.
It's being run right here.
It's not quite done yet.
We could also go to report definitions and go down to that section for test
proxy avoidance
report, double click there.
And it will show us any reports that have been generated based on that report.
So here it is. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So here it is.
If we click on HTML, it opens up a new tab.
And there is our one chart based on what we asked for in that report.
So let me go ahead and close that tab.
We'll go back to the 40 analyzer.
So in the next video, I'd like to walk you through once again creating a report
.
But this time we'll do a custom report based on a custom template that can
include a lot
of the ingredients we built up to this point.
So I'll see you in the next video as we take a look at custom reports and
templates.