how to import informer exported reports to SA

[Anonymous]

Hi All,

I tried importing the reports in SA which I have on XML form. But I am not able to as SA is looking for only zip file to import.

Could anyone please help me how to import the reports to SA.

Regards,

Anil

[huanzhou1]

The format is different, last time we created one by one in SA by following the xml...

[Anonymous]

It would be very helpful if share the reports. Please help me.

At-least the reports which was here earlier like the Profiler , UA reports etc.

[huanzhou1]

i don't have like, now i download from Live, can you check see whether Live has the reports you want?

[Anonymous]

Live has only log reports, m not able to get packet reports from it.

[huanzhou1]

There is packet reports as well, maybe your live access issue which only can access log related.

i can send you some report templates i converted from old informer, can PM me your email address?

[RSAAdmin]

There is no import option for Informer reports at this time. SA's Content Team will be releasing packet based reports to Live throughout the course of their next few content releases.

[huanzhou1]

i've sent you the rules and reports, not sure whether can help or not. thanks.

[Anonymous]

patriot3w, I have the same problem.

What are the reports avaiable? Where they are avaiable (Resource Types)?

In my old version I could see the default reports, for example, Botnet Activity to Informer. But now, I can't see nothing.

Note: I open a ticket together the RSA to assess my Live account access.

Thanks

[huanzhou1]

mine also don't have, but there is flex parser for it. you can create the report yourself. if you want, i can share with the reports and rules i converted, just leave you email address to me.