Schedule ThreatSync Reports in WatchGuard Cloud

Applies To: ThreatSync

You can schedule ThreatSync reports to run for different incident types. Each scheduled report can contain multiple reports. WatchGuard Cloud sends scheduled reports as a zipped .PDF email attachment to recipients you specify. Recently generated reports are also available for download in WatchGuard Cloud.

If the generated report is larger than 10 MB, it is not emailed. WatchGuard Cloud stores scheduled report files for a limited time. You can download reports larger than 10 MB while they are available.

Manage Scheduled Reports

To view and manage ThreatSync scheduled reports in WatchGuard Cloud:

  1. Log in to WatchGuard Cloud.
  2. Select Administration > Scheduled Reports.
    The list of scheduled reports opens.

Screenshot of the Scheduled Reports list in WatchGuard Cloud

From the Scheduled Reports page, you can add, edit, or delete scheduled reports. You can also download recently generated reports.

Add a Scheduled Report

You can schedule reports to run daily, weekly, monthly, or immediately. For daily, weekly and monthly reports, the report frequency also determines the date range for data included in the report. For example a weekly report includes data from the most recent 7 day period from Sun 01:00 (Europe/Berlin) until the following Sun 00:59 (Europe/Berlin).

To add a scheduled report:

  1. Click Add Scheduled Report.
    The Create Schedule wizard opens with the Report Description step selected.

Add a Scheduled Report Wizard, Step 1 - Report Description

  1. In the Schedule Name text box, type a name for the report.
  2. In the Description text box, type a description for the report.
  3. In the Product or Application section, select Threats.
  4. Click Next.
    The Add Reports page opens.

Screenshot of the Add Reports page in the Add a Scheduled Report Wizard, step 2

  1. In the Reports section, select the check box for each report to include in your scheduled report.
    1. To include all available reports, click Select All .
  2. In the Filters section, click Select filters and select the filters to apply to your scheduled report.

Screenshot of the Filter dialog box in the Add a Scheduled Report Wizard in WatchGuard Cloud

The Filters section is not available if only the Executive Summary report is selected.

  1. In the Sort Criteria section, select whether to sort the report by date or risk level, in ascending or descending order.
  2. Click Next.
    The Schedule Report page opens.

Screenshot of the Schedule Report page, Step 3, in the Add a Scheduled Report Wizard

  1. From the Frequency drop-down list, select how often to run the report. Select one of these options:
    • Daily — Runs daily and contains data for the past 24 hours (includes 00:00 until 23:59, adjusted to the timezone)
    • Weekly — Runs weekly and contains data for the past week (includes Sunday 0:00 to Saturday 23:59)
    • Monthly — Runs monthly and contains data for the past month (includes the first day 0:00 to the last day 23:59)
    • Run Now — Queues the report to run for the date range you specify

      • The time required to generate and send the report is dependent on the type of selected reports, and position of the request in the processing queue.

  2. To select the time the report starts to run, in the Start Time text box, click Screenshot of the clock icon.
    Or, in the Start Time text box, type the hour and minute of the day to start the report in 24-hour format HH:MM.
  1. For a Weekly report, specify the day of the week to run the report.
  2. For a Monthly report, specify the day of the month to run the report.
  3. Specify the Time Zone for the scheduled report.
  4. Select the Language for the report.
  5. Click Next.
    The Add Recipients step opens.

Screenshot of the Add Recipients page, Step 4, in the Add a Scheduled Report Wizard

  1. In the Report Recipients text box, type the email address for each report recipient. To separate multiple addresses, use a space, comma, or semicolon. Press Enter to add the specified addresses to the recipient list.
    Reports must be smaller than 10 MB to be emailed.
  2. To add yourself as a recipient, click Add me as a recipient.
    The email address associated with your WatchGuard Cloud account shows in the list.
  3. Click Next.
    The Finish page opens, with a summary of the scheduled report settings.
  4. Click Save Report.
    The report is added to the list of scheduled reports.

Edit or Delete a Scheduled Report

You can edit and delete scheduled reports.

To edit a scheduled report:

  1. In the list of scheduled reports, click the report name.
    A summary of the report settings opens.

Screenshot of the scheduled report Description page that lists all report settings

  1. To edit the report description, click Edit Description.
  2. To edit the reports to run:
    1. Click Edit Reports.
    2. Select the devices you want to include in the reports.
    3. Select the check box for each report to include.
  3. To edit the report schedule:
    1. Click Edit Schedule.
    2. From the Frequency drop-down list, select Monthly, Weekly, or Daily.
    3. Specify the day and time to start the report.
  4. To edit the report recipients, click Edit Recipients.
  5. To save your changes, click Update.

To delete a scheduled report:

  1. Beside the name of the report you want to delete, click .
  2. Select Delete.
  3. In the Remove Scheduled Report dialog box, click Remove.
    The report is removed.

Download a Generated Scheduled Report File

WatchGuard Cloud stores scheduled report files for a limited time, which varies based on the report frequency.

To download a generated report:

  1. Select Administration > Scheduled Reports.
  2. Click the report name.
  3. In the History section, click the .PDF or .ZIP icon.

For more information, go to Download Scheduled Reports.

Related Topics

About ThreatSync Reports

About WatchGuard Cloud Reports