H3C Technologies H3C Intelligent Management Center - Manual (Page 73)

64
10.Managing behavior audit reports
UBA uses the report management function of the IMC Platform to display the behavior audit reports.
UBA provides the following types behavior audit report templates:
• FTP Destination TopN
• FTP User TopN
• FTP Source TopN
• Mail Sender TopN
• Web User TopN
• Web Site TopN
• Unknown Application TopN
• Application TopN
• Source TopN
• Destination TopN
Each type of report template has daily report and weekly report. You can operate (add, view, modify, or
delete) a daily report in the same way a weekly report is operated. The only difference between them is
that they use different time granularities.
• Daily Report—The granularity of the statistics collection time is one hour.
• Weekly Report—The granularity of the statistics collection time is one day.
Adding a behavior audit report
1. Click the Report tab.
2. In the upper right corner of the page that appears, click the Add My Real Time Report link or icon
.
The window for selecting templates appears and displays all real-time templates to be added in
the template list.
Template List contents
{
Template Name—Name of the real-time report template.
{
Type—Type of the real-time report template.
{
Definition Type—Definition type of the real-time report template: Pre-defined or Custom. For
more information about custom real-time report templates, see HP IMC Base Platform
Administrator Guide.
3. In the Query Template area, perform one of the following tasks to query real-time templates:
{
In the Template Name field, enter the name of a behavior audit report template and click
Query.
The template list displays all templates that match the query criterion.
This field supports fuzzy matching and case-insensitive query. For example, if you enter u, this
field matches all template names that contain u or U.