INTOUCH® INSA
Network Security Agent
Previous Contents Index

Dates and Times

You specify a time period to report on. For example, you might want to include incidents which occurred during the period of March 1, starting at 5:01pm, through March 6, ending 8:30am. To specify a particular time period, you provide a start date and time and an end date and time.

To include all dates and times on the report, select "Earliest" as the begin date and "Latest" as the end date.

Select a Begin Date Option

NOTE: If a begin date was entered the last time this report was run, that date will be the first item on the menu. 



                             +---Begin Date---+ 
                             |  28-Feb-1997   | 
                             |  Earliest      | 
                             |  Enter Date    | 
                             |----------------| 
                             |  Exit          | 
                             +----------------+

  Select the default date, if there is one, to use as the begin date.
  Select Earliest to start with the oldest date and time.
  Select Enter Date if you want to enter a begin date.

If you select Enter Date, you are asked for a begin date. 



Begin date (MMDDYYYY)? ________

To specify a begin date, enter a date in MMDDYYYY format.

Enter Earliest to start with the oldest date.

Press [Return] to accept the default. 



Begin date (MMDDYYYY)? 03011997

Select a Begin Time Option

If a begin date is provided, you can enter a begin time.

NOTE: If a begin time was entered the last time this report was run, that time will be the first item on the menu. 



                              +--Begin Time---+ 
                              |  02:30        | 
                              |  Earliest     | 
                              |  Enter Time   | 
                              |---------------| 
                              |  Exit         | 
                              +---------------+

  Select the default time, if there is one, to use as the begin time.
  Select Earliest to start with the earliest time on the entered date.
  Select Enter Time if you want to enter a begin time.

If you select Enter Time, you are asked for a begin time. 



Begin time (HH:MM)? _____

To specify a begin time, enter a time in HH:MM format (24-hour format). For example, you would enter 03:15 for 3:15 AM or enter 15:15 for 3:15 PM.

Enter Earliest to start with the earliest time.

Press [Return] to accept the default. 



Begin time (HH:MM)? 17:01

Select an End Date Option

NOTE: If an end date was entered the last time this report was run, that date will be the first item on the menu. 



                             +----End Date----+ 
                             |  04-Mar-1997   | 
                             |  Latest        | 
                             |  Enter Date    | 
                             |----------------| 
                             |  Exit          | 
                             +----------------+

  Select the default end date, if there is one, to use as the end date.
  Select Latest to include the most current date and time.
  Select Enter Date if you want to enter an end date.

If you select Enter Date, you are asked for an end date. 



End date (MMDDYYYY)? 03061997

To specify an end date, enter the date in MMDDYYYY format.

Enter Latest to include the most current date and time.

Press [Return] to accept the default.

Select an End Time Option

If an end date is provided, you can enter an end time.

NOTE: If an end time was entered the last time this report was run, that time will be the first item on the menu. 



                              +---End Time----+ 
                              |  20:30        | 
                              |  Latest       | 
                              |  Enter Time   | 
                              |---------------| 
                              |  Exit         | 
                              +---------------+

  Select the default time, if there is one, to use as the end time.
  Select Latest to include the latest time on the entered date.
  Select Enter Time if you want to enter an end time.

If you select Enter Time, you are asked for an end time. 



End time (HH:MM)? 08:30

To specify an end time, enter a time in HH:MM format (24-hour format).

Enter Latest to include the latest time.

Press [Return] to accept the default.

The date and time information is displayed in the report "Selection Criteria" box. 



+--------- Selection Criteria -------------------------------------------------+ 
|Begin date : 01-Mar-1997 at 17:01                                             | 
|End date   : 06-Mar-1997 at 08:30                                             | 
|Alert names:                                                                  | 
|Priorities :                                                                  | 
|User names :                                                                  | 
|Locations  :                                                                  | 
+------------------------------------------------------------------------------+

Alert Names

A menu list of the alert names is displayed. The alert names come from the alert file. You select which alert names to include on the Incident Report. You can include one, several or all alert names.

Note: If this report has been run before and alert names were selected the last time, the alert names will be shown in the "Selection Criteria" box. If you want to use these same names, select accept current default. If you want to use different names, select reset to start over. 



                            +Select Alert Names+ 
                            |  all             | 
                            |------------------| 
                            |  INVALID_LOGIN   | 
                            |  MGMT            | 
                            |  PAYROLL         | 
                            |  PRIV            | 
                            |  URGENT          | 
                            |------------------| 
                            |  Exit            | 
                            +------------------+

To include ALL alert names, select all. "ALL" is displayed in the "Selection Criteria" box and you proceed to the next report criteria prompt.

To select an alert name, use the mouse to select the name you want from the menu. The name is displayed in the "Selection Criteria" box. Select as many names as you wish. 



+--------- Selection Criteria -------------------------------------------------+ 
|Begin date : 01-Mar-1997 at 17:01                                             | 
|End date   : 06-Mar-1997 at 08:30                                             | 
|Alert names: INVALID_LOGIN,MGMT,PRIV                                          | 
|Priorities :                                                                  | 
|User names :                                                                  | 
|Locations  :                                                                  | 
+------------------------------------------------------------------------------+

To remove one of the selected names, select the Remove Alert Name option at the bottom of the menu. A menu list of the selected alert names is displayed. 



                          +--Select Alert Names--+ 
                          |  ...               +Remove Alert Name-+ 
                          |  Remove Alert Name |  INVALID_LOGIN   | 
                          |--------------------|  MGMT            | 
                          |  Exit              |  PRIV            | 
                          +--------------------+------------------+

Use the mouse to select the name you want to remove. (In this example, PRIV is removed.) The name is removed from the list shown in the "Selection Criteria" box. You can remove as many names as you wish. 



+--------- Selection Criteria -------------------------------------------------+ 
|Begin date : 01-Mar-1997 at 17:01                                             | 
|End date   : 06-Mar-1997 at 08:30                                             | 
|Alert names: INVALID_LOGIN,MGMT                                               | 
|Priorities :                                                                  | 
|User names :                                                                  | 
|Locations  :                                                                  | 
+------------------------------------------------------------------------------+

Select accept current default when you are done selecting alert names.

Use the reset menu option to erase the current selections and start over.

Alert Priority Codes

You can select the alert priority codes to include on the Incident Report or include all codes. The priority codes are 1-digit numbers from 1 to 9.

Note: If this report has been run before and priority codes were selected the last time, the codes will be shown in the "Selection Criteria" box. If you want to use these same priority codes, select accept current default. If you want to use different codes, select reset to start over. 



                             +Select Priorities+ 
                             |  all            | 
                             |-----------------| 
                             |  1              | 
                             |  2              | 
                             |  3              | 
                             |  4              | 
                             |  5              | 
                             |  6              | 
                             |  7              | 
                             |  8              | 
                             |  9              | 
                             |-----------------| 
                             |  Exit           | 
                             +-----------------+

To include ALL priority codes, select all. "ALL" is displayed in the "Selection Criteria" box and you proceed to the next report criteria prompt.

To select a priority code, use the mouse to select the code you want from the menu. The selected code is displayed in the "Selection Criteria" box. Select as many priority codes as you wish.

To remove one of the selected codes, select the Remove Priority option. A menu of the selected codes is displayed. Use the mouse to select the code you want to remove. The code will be removed from the list shown in the "Selection Criteria" box. Remove as many codes as you wish.

Select accept current default when you are done selecting priority codes.

Use the reset menu option to erase the current selections and start over. 



+--------- Selection Criteria -------------------------------------------------+ 
|Begin date : 01-Mar-1997 at 17:01                                             | 
|End date   : 06-Mar-1997 at 08:30                                             | 
|Alert names: INVALID_LOGIN,MGMT                                               | 
|Priorities : 2,5                                                              | 
|User names :                                                                  | 
|Locations  :                                                                  | 
+------------------------------------------------------------------------------+

User Names

You can select specific user names to include on the report or include all the user names.

Note: If this report has been run before and user names were entered the last time, the names will be the first item on the menu. If you want to use these same user names, just select the default names. The user names will be displayed in the "Selection Criteria" box and you will proceed to the next report criteria prompt. 



                             +---User Names---+ 
                             |  ALL           | 
                             |  Enter Names   | 
                             |----------------| 
                             |  Exit          | 
                             +----------------+

  Select ALL if you want to include ALL the user names.
  Select Enter Names if you want to specify which user names to include on the report.

If you select Enter Names, you are asked for the user names to include. 



User names (AAA,BBB,...)? ALL_________________________________________________

You can enter a single user name or a comma-separated list of user names. You can also use the asterisk (*) character as a wildcard. Here are some examples:

To select user name ALAN, enter:

To select user names, ALAN, SUE and GEORGE, enter:

To select the user names that:

enter:

Your selections are displayed in the report "Selection Criteria" box. 



+--------- Selection Criteria -------------------------------------------------+ 
|Begin date : 01-Mar-1997 at 17:01                                             | 
|End date   : 06-Mar-1997 at 08:30                                             | 
|Alert names: INVALID_LOGIN,MGMT                                               | 
|Priorities : 2,5                                                              | 
|User names : ALL                                                              | 
|Locations  :                                                                  | 
+------------------------------------------------------------------------------+

Locations

You can select specific locations to include on the report or include all locations.

Note: If this report has been run before and locations were entered the last time, the locations will be the first item on the menu. If you want to use these same locations, just select the default locations. The locations will be displayed in the "Selection Criteria" box and you will proceed to the next report criteria prompt. 



                           +-----Locations------+ 
                           |  ALL               | 
                           |  Enter Locations   | 
                           |--------------------| 
                           |  Exit              | 
                           +--------------------+

  Select ALL if you want to include ALL the locations.
  Select Enter Locations if you want to specify which locations to include on the report.

If you select Enter Locations, you are asked for the locations to include. 



Locations (AAA,BBB,...)? ALL___________________________________________________

You can enter a single location/address, or a list of locations separated by commas. You can use the asterisk (*) character as a wildcard. Here are some examples:

To select LAT addresses that begin with LAT 1, enter:

To select IP domain names that end in .COM and IP addresses that end in .3, enter:

For example, if *.COM is entered, 



Locations (AAA,BBB,...)? *.com_______________________________________________

all locations ending in ".COM" would be included.

For this sample report, "ALL" is selected.

The selected locations are displayed in the report "Selection Criteria" box. 



+--------- Selection Criteria -------------------------------------------------+ 
|Begin date : 01-Mar-1997 at 17:01                                             | 
|End date   : 06-Mar-1997 at 08:30                                             | 
|Alert names: INVALID_LOGIN,MGMT                                               | 
|Priorities : 2,5                                                              | 
|User names : ALL                                                              | 
|Locations  : ALL                                                              | 
+------------------------------------------------------------------------------+

Report Type



                            +----Report Type----+ 
                            |  Summary Report   | 
                            |  Detail Report    | 
                            |  Session Text     | 
                            |-------------------| 
                            |  Exit             | 
                            +-------------------+

The report options are:
  Summary Report Shows the count of incidents and percent of the total count, within your selection criteria, for the first sort field specified.
  Detail Report Prints one line per incident. The detail report level breaks on the first sort field specified. The report shows incident date, incident time, user name, alert priority, alert name, location and count.
  Session Text Prints the actual text of the session that caused the incident. The report displays one incident per page.

NOTE: If this report has been run before, the default (highlighted) report type is the option that was selected the last time this report was created.

Use the mouse to select the report type. Your selection is displayed in the "Report Type" box. 



        +------------ Report Type -------------+ 
        |                                      | 
        |                                      | 
        |File: current                         | 
        |Type: Detail Report                   | 
        |                                      | 
        |                                      | 
        +--------------------------------------+

Proceed



                                 +-Proceed-+ 
                                 |  Yes    | 
                                 |  No     | 
                                 |---------| 
                                 |  Exit   | 
                                 +---------+

  Select Yes to create the report.
  Select No to go back to the report type prompt (the previous prompt).
  Select Exit to abandon report creation and return to the Reports menu.

Note
If you wish to go back and change some information, select NO to go back to the previous prompt, or press the \ (backslash) key until you back up to the item you want to change.

Previous Next Contents Index