Reporting settings

Kaspersky CyberTrace allows you to perform email delivery of statistics reports. This section explains how to manage tasks for creating and sending reports to email addresses, as well as for customizing and scheduling email delivery. Also you can download the reports on the Dashboard page, see information in the Downloading statistics report section.

Users with all the licensing levels (Community Edition, Matching Engine, TIP Enterprise) have access to downloading the statistics reports on the Dashboard page.

Users with the Administrator and Tenant manager roles under the TIP Enterprise license have full access to the Reporting page.

For users with the Administrator and Tenant manager roles under the Community Edition and Matching Engine licenses, the Reporting page is displayed in the read-only mode.

For users with the Analyst role, the Reporting page is hidden.

You can manage reporting tasks on the Settings → Reporting page. To access this page, you need to switch to the System management mode. This mode is accessible only to users with the Administrator role. This page displays a table with tasks for creating and sending reports. For each task, you can view the following information in the table:

• Status

  Indicates whether the task is enabled or disabled. At a time, no more than three tasks can be enabled either in the System management mode or in each tenant.

  If the task has completed with an error, the warning sign () will be displayed in the Last task execution column of the table.

• Name

  Name of the task.

• Created By

  User account name of the person who added the task.

• Recipient email

  The email address of the recipient.

• Period

  Periodicity (month, week, day) and execution start time.

• Last task execution

  Date and time of the last execution

• Next task execution

  Date and time of the next execution

• Actions

  Operations you can perform on the task: start task execution (Launch now), download report, edit task, delete task.

On the Reporting page, you can set up mail client, add a reporting task, and check the mail server connection.

Setting up mail client

To set up mail client:

1. On the Settings → Reporting page, click the Mail client settings button.

   The Mail client settings page opens.

2. Under the Connection settings section specify the following parameters:
   • SMTP server address

     Enter 1 to 255 characters.

     SMTP server port

     Enter number of 0 to 65535.

   • Connection type

     Select either None, SSL/TLS, or STARTTLS.

     Before setting an encrypted STARTTLS or SSL/TLS connection with the mail server that will be used for sending reports, make sure that you have the TLS certificate for this server and this certificate is added to the trusted certificates storage on your computer.

     You can get this certificate by addressing the mail server or by contacting Technical Support of your company.

     The folder with the certificates /etc/ssl/certs contains a symbolic link to the root certificate. The name of the link contains a hash of the certificate. Also, it is required that the folder contains symbolic links to all certificates. Otherwise, even if the chain of certificates is available in the /etc/ssl/certs folder, the connection will not be enabled.

     To add the certificate to the trusted certificates storage, run the following commands:

     • On Windows:

       Import−Certificate −FilePath "path/to/mail_server_certificate.crt" -CertStoreLocation Cert:\LocalMachine\Root

     • On Linux deb, the certificate name format is set by the update-ca-certificates utility.
     • on Linux rpm, the certificate name format is set manually by the user by using the openssl x509 −in YOUR_CERT_FILE −hash −noout command.
3. Under the Account section, specify the following parameters:
   • Login

     Enter 0 to 64 characters.

   • E-mail

     Enter 1 to 254 characters.

   • Password

     Enter 1 to 128 characters.

   • Text message (optional)

     Enter 0 to 10 000 characters.

4. Click Save.

The mail client settings are applied.

Before enabling the reporting task, check the mail server connection by clicking the Test connection button.

If you want to close the Mail client settings page without saving the data, click Cancel.

Customizing a report and adding a reporting task

To customize a report and add a reporting task:

1. On the Settings → Reporting page, click the Add task button.

   The Add reporting task window opens.

2. In the Task properties section, fill in the following fields:
   • Task name
   • Recipient's email address

     You can enter the maximum number of 2048 characters. Email addresses with Cyrillic domain names are not supported.

   • Email Subject
   • Text message (Optional)
3. In the Recur section, set up the periodicity, start time of email delivery, and the time zone.

   By specifying the time zone, you select the time according to which the task is performed. The selected time zone is also displayed in your reports.

4. Click Next.
5. Customize the following parameters of the report:
   • Report properties
     • Data source

       You can select either TCP, API lookup, or All as the data source.

     • Period from

       Period for displaying statistics.

     • Tenants

       Tenants the data of which will be included in the report. You can select tenants only in the System management mode. In the Data management mode, the report includes only the data the tenant in which the task is executed.

     • Language

       You can select the language for your report. The default language is the one set in your user account.

     Optionally, you can include the false positives in your report by selecting the corresponding check box.

   • Page properties

     You can include in your report the title page, Kaspersky logo, login user, and full name user by selecting the corresponding check boxes.

   • Widgets

     Select a set of widgets that you want to be displayed in your report.

     For the Statistics overview widget, you can select the following check boxes:

     • Incoming events
     • Number of detections
     • Number of detected indicators

     For the Top indicators by detection widget, you can select the following check boxes:

     • Default
     • Retroscan
     • Top 10 hashes: MD5, SHA1, SHA256
6. Click Save.

The reporting task is added and displayed in the tasks table on the Reporting page. By default, the newly added task is disabled in the table. To enable the task, proceed to the Settings → Reporting and enable the toggle switch in the Status column of the tasks table. Before enabling the reporting task, check the mail server connection as described below.

Checking connection

Before enabling a reporting task, check the connection by clicking the Test connection button.

Page top