Security

last person joined: 23 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Insight Daily Report - Endpoints Last 24 hours

This thread has been viewed 2 times
  • 1.  Insight Daily Report - Endpoints Last 24 hours

    Posted May 11, 2015 01:17 PM

    Is there a way to create an Insight report that will give a list of endpoints adde din the last 24 hours?  I am able to to make a scheduled report that kicks off daily.   The challenge is getting devices that were added in the last 24 hours or yesterday.  I have tried using the field "AddedAt", and am trying to find a way to not hard code the date (ie. I don't want to have to modify the date everytime the report is ran).  Is their a value that can be used like, "Last-24-hours" or "Today" or "Yesterday" that can be used?

     

    insight-24hours.jpg



  • 2.  RE: Insight Daily Report - Endpoints Last 24 hours

    Posted Jul 23, 2015 02:09 PM

    As strange as it may seem, I have found that the "timeframe" of the report is controlled by the scheduling feature rather than the configuration tab. 

     

    I run a daily report where i am looking for data form the last 24 hours. Once I completed the search config to make sure I had the correct data / fields in the report, I the STATIC feature to select the start & end date/time (Ex. start = yesterday's date @ 00:00:00... end = yesterday's date 23:59:59). I then ran the report to ensure I have the right fields & timeframe so it displayed the correct data. Once confirmed, I then set the report to scheduled and to run @ 6am the next date and "magically" it produces the desired results. 

     

    It is sad that insight was supposed to be the "new hot thing" in report for CPPM and it seems they forgot some of the basic functionality that would make the product more user friendly.