In this article, you will learn how to configure your HEIMDAL reports and alerts, and the information you get from these notifications. A HEIMDAL Dashboard user can configure the desired reports and alerts and visualize the corresponding data. They can also be able to download the reports in .pdf format, at their convenience. The Reports section is visible only to users who have the appropriate Access Control claims referring to the Report generation. Reports are generated for a minimum of 7 days and a maximum of 30 days.
The Reports section is split into three categories: On-demand reports, Scheduled reports, and Alerts management.
1. On-demand reports
2. Scheduled reports
3. Alerts management
ON-DEMAND REPORTS
The On-demand reports section is dedicated to manual report generation, filtering options, and data visualization for Detailed products reports, C-Level reports (for both Enterprise/Corporate customer and Reseller-type user accounts), SOC reports, and NIS2 reports.
The Standard view includes a table with the following details: Report type (C-Level or Detailed), Included modules, Customer (in the case of a Reseller), Selected start/end date (this date considers the report's timezone settings), Generated start/end date (this date considers the report's timezone settings), Timestamp (the timestamp when the report has been generated), and Status (can be Queued, Queue Failure, Processing, Failed, Download).
The Filters functionality allows you to filter entries by Operating System.
The Generate on-demand report button will guide you through setting up a new report type generation, which can be a Detailed product report, a C-Level report, a SOC report, or a NIS2 report. After choosing a report type, you can select the products you want to be included in the report:
If you are generating a report at Reseller-level, you will have to specify the Enterprise customer(s) that the report is/are generated for. The next step is to choose the report details: timeframe, time zone, date format, language, currency, and logo (custom logo or HEIMDAL logo).
SCHEDULED REPORTS
The Scheduled reports section is dedicated to the automatic report generation, filtering options, and data visualization for Detailed product reports, C-Level reports (for both Enterprise/Corporate customer and Reseller-type user accounts), SOC reports, and NIS2 reports.
The Standard view includes a table with the following details: Report type (Detailed, C-Level, SOC, or NIS2), Included modules, Customer (in the case of a Reseller), Timestamp (the timestamp when the report has been generated), Scheduled, Scheduled by, Recipients and Actions (Edit or Delete).
The Filters functionality allows you to filter entries by Operating System.
The left-side selector allows the user to apply the Delete action on one or more entries listed in the table.
The Generate scheduled report button will guide you through setting up a new report type generation, which can be a Detailed product report, a C-Level report, a SOC report, or a NIS2 report. After choosing a report type, you can select the products you want to be included in the report:
If you are generating a report at Reseller-level, you will have to specify the Enterprise customer(s) that the report is/are generated for. The next step is to choose the report details: email address (can be an internal or external address), timeframe, time zone, date format, language, currency, and logo (custom logo or HEIMDAL logo).
To see what a report looks like, you can scroll down to the bottom of this article and download one of the 2 attached samples.
ALERTS MANAGEMENT
The Alerts management section is dedicated to the live alerts that are being sent for each selected product that triggers a detection. The view includes a table with the following details: Customer (in the case of a Reseller), Recipient(s) (email address of the receiving user), REP, MU, GP, NGAV, VN, Zero-Trust, PEDM, and Actions (Edit or Delete).
The Set up alerts button will guide you through setting up a new alert configuration for a specific customer (or more) that should be sent to a recipient or more.
An Enterprise customer would be presented with a modal that allows them to select the products for which alerts should be generated.
If you are a Reseller, you need to specify one or more customers first and then select the products that should be monitored.
The next step is to configure the recipient's email address, time zone, date format, language, and logo (custom or HEIMDAL).
To see what an alert looks like, check out the samples below:
IMPORTANT
Alerts are generated by a job that runs on our servers every hour. This means that once an event is detected, the alert will be sent out as an email notification when the job will run again (in a specific case, if a detection is made at 12:10 PM and the job ran at 12:05 PM, the alert will be sent at 1:05 PM, when the job runs again).
Reseller Master GP changes are configured at the user level on the reseller's user account in the Reseller Master GP Changes:
Here is a sample on the way a Reseller Master GP alert looks like: