1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
|
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE lire:report-spec PUBLIC
"-//LogReport.ORG//DTD Lire Report Specification Markup Language V1.0//EN"
"http://www.logreport.org/LRSML/1.0/lrsml.dtd">
<lire:report-spec xmlns:lire="http://www.logreport.org/LRSML/"
superservice="firewall" id="top-msg" charttype="bars">
<lire:title>Top Messages Firewall Report</lire:title>
<lire:description>
<para>This report shows the top messages (IDS alerts or others)
generated by the firewall.
</para>
</lire:description>
<lire:param-spec>
<lire:param name="msgs_to_show" type="int">
<lire:description>
<para>This parameter controls the number of messages to show in
the report.</para>
</lire:description>
</lire:param>
</lire:param-spec>
<lire:display-spec>
<lire:title>Top $msgs_to_show Messages</lire:title>
</lire:display-spec>
<lire:filter-spec>
<lire:ne arg1="$msg" arg2="-"/>
</lire:filter-spec>
<lire:report-calc-spec>
<lire:group sort="-msg_count" limit="$msgs_to_show">
<lire:field name="msg"/>
<lire:sum name="msg_count" field="count"/>
</lire:group>
</lire:report-calc-spec>
</lire:report-spec>
<!--
Keep this comment at the end of the file
Local variables:
mode: xml
-->
|
