Documentation Center
AlienVault® USM Anywhere™

USM Anywhere Event Type Templates

  Role Availability   Read-Only   Analyst   Manager

USM Anywhere includes a set of predefined templates based on the classification of eventAny traffic or data exchange detected by AlienVault products through a Sensor, or through external devices such as a firewall. data source types and based on data sources.

You can find these templates on REPORTS > EVENT TYPE TEMPLATES.

Note: For further information about pluginsPlugins specify how to collect and normalize raw information from devices to create events that can then be analyzed to determine threats and vulnerabilities., see the Plugin Management page.

There are the following types of templates

Each report listing includes the Generate Report link, which opens which opens the Create Report popup window. You can define a name, a description, a date range, the output format, the number of records, and the additional view you want to include in your report.

To generate a report

  1. Navigate to REPORTS > EVENT TYPE TEMPLATES.
  2. The Event Type Templates page displays.

  3. Select a type of template.
  4. Click the Generate Report link on the report you want to run.
  5. The Create Report popup window displays.

  6. The report name is populated, but you can modify it.
  7. (Optional) A description of the report is provided, but you can modify the text.
  8. If your report has been included in the AlarmsAlarms provide notification of an event or sequence of events that require attention or investigation. or Events Category, you can choose a date range. You can select a predefined range between Last Hour, Last 24 Hours, Last 7 Days, Last 30 Days, or Last 90 Days. You can also set your own date range by clicking the Calendar icon ().
  9. If your report has been included in the Vulnerabilities or Configuration IssuesAn identified configuration of software deployed, or features of software in use, which is known to be insecure. Category, you can use the boxes having a date to set your own date range.
  10. Choose the export format, CSV or HTML.
  11. If you choose CSV, your browser downloads the exported file automatically.

    Note: AdBlock blocks the download of CSV reports. To avoid this, you need to add the URL of your USM Anywhere Control Node as an exception in AdBlock.

    If you choose HTML, a new tab opens in your browser, displaying the report. You can print it by clicking Print or you can save it as PDF.

  12. Choose the number of records to export.
  13. If you have chosen the HTML format, you will see the Graphs section. Use this section to include additional views. There are some defaults views already selected, but you can select or remove the graphs you want to include in the report by clicking the right arrow icon () and the left arrow icon ().
  14. Select the Save Report checkbox if you want to generate a new report with your modifications.
  15. Click Generate Report.
    • If you have chosen the CVS export format, your browser downloads the exported file automatically.
    • If you have chosen the HTML export format, your browser opens a new tab containing the report. You can print it by clicking Print, or save it as PDF.
  16. Note: If you have checked the Save Report checkbox, you can see the export reports through the option REPORTS > MY REPORTS. See My Reports on USM Anywhere for further information.