Chapter 8. Advanced Operation and Security Analysis


In this chapter, you learn about topics that are considered advanced operations:


This chapter discusses in detail the two most advanced operations of CS-MARS: reporting and rules.

Reporting is considered an advanced operation because it is one of the more complex features available in CS-MARS. The complexity of reporting stems from the different view types, run times, report formats, and query variables of the data you want to report. You will become familiar with using the different methods in CS-MARS to create reports: using queries and creating custom reports manually. This chapter introduces you to the different types of reports ...

Get Security Threat Mitigation and Response: Understanding Cisco Security MARS now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.