Chapter 8. Advanced Operation and Security Analysis

<feature><title></title>

In this chapter, you learn about topics that are considered advanced operations:

</feature>

This chapter discusses in detail the two most advanced operations of CS-MARS: reporting and rules.

Reporting is considered an advanced operation because it is one of the more complex features available in CS-MARS. The complexity of reporting stems from the different view types, run times, report formats, and query variables of the data you want to report. You will become familiar with using the different methods in CS-MARS to create reports: using queries and creating custom reports manually. This chapter introduces you to the different types of reports ...

Get Security Threat Mitigation and Response: Understanding Cisco Security MARS now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.