cancel
Showing results for 
Search instead for 
Did you mean: 
bolek
Level 8
Report Inappropriate Content
Message 1 of 8

report generated for every user from the list

Jump to solution

Hi 

By making a report we can point siem to filter queries by a Source User watchlist. Was wondering how to perfom a report for every user (not all of them) from the watchlist, list, file, etc. In other words, we have 30 users on a list and expect to create 30 same reports with every single one of them as a source user filter.

Any idea, API?

Regards.

1 Solution

Accepted Solutions
Highlighted
David1111 Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 2 of 8

Re: report generated for every user from the list

Jump to solution

Hi Bolek.

its a very nice question.

but i don't have a simple solution.. just a script work around.

write a script that inserts via API 1 user name to the McAfee Watchlist 

on the McAfee Report UI insert in the global filter to filter on that 1 User Watchlist

the script will change in each session the next name in the list + run the report (via API) with the new user name in the whatchlist

and so on...

Best Regards👍👍👍

David.

 

View solution in original post

7 Replies
Highlighted
David1111 Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 2 of 8

Re: report generated for every user from the list

Jump to solution

Hi Bolek.

its a very nice question.

but i don't have a simple solution.. just a script work around.

write a script that inserts via API 1 user name to the McAfee Watchlist 

on the McAfee Report UI insert in the global filter to filter on that 1 User Watchlist

the script will change in each session the next name in the list + run the report (via API) with the new user name in the whatchlist

and so on...

Best Regards👍👍👍

David.

 

View solution in original post

McAfeeSIEM_Eric McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 8

Re: report generated for every user from the list

Jump to solution

Bolek,

 

Agreed with David. However also if you would like to see this included in a future release please submit the product idea as this is not currently possible in the UI at this time:

https://community.mcafee.com/t5/Enterprise-Customer-Product/idb-p/business-ideas

 

Thank You,
Eric
bolek
Level 8
Report Inappropriate Content
Message 4 of 8

Re: report generated for every user from the list

Jump to solution

Thanks guys.

I have successfully achieved my goal using the API.

Good idea with the PER , will take care of it.

 

Regards, 

Dimm
Level 9
Report Inappropriate Content
Message 5 of 8

Re: report generated for every user from the list

Jump to solution

...but don't rely on PER. They are either implemented never or not implemented at all 😒

McAfeeSIEM_Eric McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 8

Re: report generated for every user from the list

Jump to solution

I like how you say that yet if you go to the product idea page for SIEM and look under Idea Statuses you will see that over 300 have been delivered. I am sorry if your idea has not been delivered yet.

 

Thank You,
Eric
David1111 Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 7 of 8

Re: report generated for every user from the list

Jump to solution

I personly posted some greate ideas

i know its great ideas becuase they exist in other SIEM's like Qradar etc.

But they were closed and forgaten becouse they didn't get a high vote..

Best Regards👍👍👍

David

bolek
Level 8
Report Inappropriate Content
Message 8 of 8

Re: report generated for every user from the list

Jump to solution

Thanks David.

I just hope that in terms of all of the 10.x EOL versions comming this year they will have more engineers to create, test and implement our PERs. 

I wonder if they have implemented any idea so far (including high rated ones) or maybe it is only a good looking marketing feature,

 

Regards, Tom

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community