Reports

flare allows you to easily prepare and configure reports about your events and analytics, all within an easy to use interface these reports can also help you aggregate , summarize and share information across your organization or with external stakeholders to highlight the value of flare's data for users migrating from v1 to v2, read the docid\ vrolgovry 4adekifrzjq what's new? creating and configuring reports have a new look and feel reports now automatically pull in events based on your configuration– no need to manually bulk add hundreds of events at a time reports now auto save if you're not ready to generate, the report will still be saved to your tenant in a draft status! pdfs and docx look more streamlined csv exports are now available for reports you can still manually add events to a given report these are now called highlighted events and they will be displayed in the appropriate section based on your report configuration for example, if you add an event that is under illicit networks , then that highlighted event will show in that section in the pdf/docx output for events added that fall outside the scope of your configuration, they will be added to a new section, the appendix , but will be organized by category scheduling reports scheduling is now available to view more details, see docid\ nuag07htomojjukgu4aki ai notes for each section of the report can now be optionally ai generated reports can occupy a lot of your time to speed things up, use ai to generate copy for you– available for each section of the report, including analytics the ai will focus on raw stats , % differences , and comparisons to the previous date range as such, it will not make any assumptions about your event data simply click the feather icon to generate you can make changes at any time to the copy within each section, even after generation creating reports to create a report, click on reports in the sidebar, then click new report configuring reports when a report is first created, the configuration wizard will be displayed there are three main components title and type allows you to give your report a title and edit the author report configuration allows you to select to configure which events are to be reported on you can modify your identifier scope , categories , date range , severity filters , and the option to include or not include direct links to flare for events report customization allow you to choose which analytics should be included, the number of events per category to be displayed, as well as the ability to add notes let's walk through each title and type here you can modify the title and author report configuration choose your identifier scope the default is tenant which includes all of your individual identifiers and identifier groups however, you can specify specific identifiers or a group to report on should you so choose choose your categories the report will automatically pull in events based on your choice you can make it as large or as small as you want, depending on the categories you select choose your date range this will pull in events within that range automatically choose your severity filters you might want to filter out low tier severity events, or you might want to keep them– the choice is yours choose whether you want to include flare links per event these links will show up in the pdf/docx output as you make changes, the details panel will automatically display the number of events included report customization each section of the report is shown here each section is expandable to allow you to customize specific elements of your report executive summary you can generate an executive summary automatically using ai with the feather icon, or write your own note there needs to be existing notes in the other report sections (below) for the ai to generate proper insights– it will be disabled until there is at least one note in another section analytics the analytics section contains all graphs from the flare dashboard you can pick and choose which graphs you'd like to include by selecting/deslecting the checkbox for each graph the graphs are displayed in real time when expanded note some graphs are not affected by the report configuration step you can generate a quick summary for each graph using ai with the feather icon, or write your own categories each category has it's own section and displays the number of events within, including highlighted events some categories have nested sub categories you can specify the number of events displayed per category, up the maximum of 20 this is so that the report is not hundreds of pages long note the full number of events can still be seen in the csv file that is available once the report is generated note you can add up to 1000 highlighted events per report, split across all sections highlighted events display at the top of each categories event table in the pdf/docx output you can add highlighted events by adding them from the event feed in flare remember, your reports are automatically saved, so don't worry about losing your place you can generate a quick summary for each category or sub cateogry using ai with the feather icon, or write your own once you've made your selections, click generate downloading reports once the generation of the report is complete, the status will update in the reports page for that specific report you can download it in pdf or docx format should you wish to refactor beyond what the reporting wizard provides optionally, you can download a csv of all of the events in that report