Schedule to Generate a Search Report in the Background

Use the Report feature in the Event Logging page to run one-time or scheduled event log searches in the background and generate reports. You can modify or cancel the scheduled report at any time. You can also modify a one-time search query to be a recurring search.

Note	You can schedule to generate reports only for historical events. You can opt to get alerts on reports that have started, completed, or have failed.

Follow these steps to schedule a search and generate report:

Procedure

Step 1	In the navigation bar, choose Events & Logs > Events > Event Logging.
Step 2	Click the Historical tab to view historical events.
Step 3	Type the search query in the search bar.
Step 4	Click the Search drop-down and choose Schedule Report.
Step 5	(Optional) Enter a name for the report to identify it.
Step 6	The Generate report now check box is checked by default. When checked, the report generation starts upon saving.
Step 7	Check the Setup recurring schedule check box and configure these settings: Search Logs for the Last: Specify how far back you want to search through. Frequency: Specify how frequent you want the scheduled search to occur and the time at which you want it to run.
Step 8	Confirm the scheduled search criteria at the bottom of the window. Click Schedule and Generate Now. If you did not opt for the search to start immediately, click Schedule Report. Scheduled search reports are available to view for up to seven days before Security Cloud Control automatically deletes them.