Scheduled Reports
Sysdig Reporting is a highly scalable, powerful reporting platform. Use it to quickly create and schedule reports with large swathes of information. Reports are interactive, and can contain up to 30 days worth of data. You can export Reports in a variety of formats, secure data by filtering reports by Zone, and protect reports with a password.
The Schedules page lets you review, create, edit, enable and disable report schedules.
Access Schedules
To access Schedules:
Log in to Sysdig Secure.
Select Reporting > Scheduled Reports.
The Schedules page appears.
Review Schedules
On the Schedules page, you can see a list of schedules associated with your account.
You can find specific reports with the search bar and the drop-down list.
For each report schedule listed, you can see:
- A toggle to enable or disable the schedule.
- Name: The name of the schedule.
- Reports included: Which report the schedule creates.
- Frequency: How often the report is generated.
- Last Completed: When this report schedule last created a report.
Click the three-dot icon beside any report schedule to View History for the report.
Select any schedule listing to edit the schedule. See Configure a Schedule.
Create a Schedule
To create a schedule:
Log in to Sysdig Secure.
Select Reporting > Scheduled Reports.
Select Reporting > Scheduled Reports.
The Schedules page appears.
- Select New Schedule from the top right corner.
The New Schedule page appears.
- Fill out the configuration details. See Configure a Schedule.
Configure a Schedule
You can access the Schedule configuration page when you create a new schedule, or you edit an existing schedule. Here, you can configure the following:
- Report: Choose an existing report or create a new one. If existing, use the drop-down menu to choose. If creating a new report, choose from among:
- Kubernetes Workload Vulnerability Findings
- ECS Workload Vulnerability Scans
- Kubernetes Vulnerability Dashboard
- Policy Compliance Report
- ECS Workload Vulnerability Findings
- Registry Vulnerability Findings
- Host Vulnerability Findings
- Container Pipeline Vulnerability Scans
- Container Vulnerability Findings
- Resource Post Report (Legacy)
- Container Pipeline Vulnerability Findings
- Resource Posture Report
- Runtime Host Vulnerability Scanning
- Zones: Select all or one or more specific zones. If you choose to change the zone scope, you can update it the report, which will affect all associated schedules. Or create a new report without affecting any associated schedules.
- Report: Choose an existing report or create a new one. If existing, use the drop-down menu to choose. If creating a new report, choose from among:
- Kubernetes Workload Vulnerability Findings
- ECS Workload Vulnerability Scans
- Kubernetes Vulnerability Dashboard
- Policy Compliance Report
- ECS Workload Vulnerability Findings
- Registry Vulnerability Findings
- Host Vulnerability Findings
- Container Pipeline Vulnerability Scans
- Container Vulnerability Findings
- Resource Post Report (Legacy)
- Container Pipeline Vulnerability Findings
- Resource Posture Report
- Runtime Host Vulnerability Scanning
- Zones: Select all or one or more specific zones. If you choose to change the zone scope, you can update it the report, which will affect all associated schedules. Or create a new report without affecting any associated schedules.
- Name: The name of the schedule.
- Description: Enter any descriptive text for the schedule.
- Frequency & Timeframe: Select how often a schedule should run: daily, weekly or monthly.
- Daily: Select which time of day the report should run (for example, 12:00 AM, 1:30 PM).
- Weekly: Select which day of the week and time the report should run.
- Monthly: The the day (1st, 15th, Last Day) and time
- Data: Select whether the report uses your local timezone or UTC. The time range of the data included depends on the frequency:
- Daily: The report includes data from the previous 24 hours leading up to the scheduled run time.
- Example 1: A report scheduled for 12:00 AM (midnight) will generate data from the entire previous calendar day (12:00 AM to 11:59 PM).
- Example 2: A report scheduled for 1:00 PM will generate data from the previous day at 1:00 PM until the current day at 12:59 PM.
- Weekly: The report includes data from the previous 7 days leading up to the 12:00 AM (midnight) run time.
- Example: A report scheduled for Sunday (which runs at 12:00 AM Sunday) will include data from the previous Sunday at 12:00 AM until Saturday at 11:59 PM.
- For Policy Compliance Reports, the report only includes live data at the time of the report being generated, not the full 7 days.
- Monthly: The report includes data from the entire previous calendar month.
- Example: The report runs at 12:00 AM on March 1st and includes all data from February 1st at 12:00 AM until February 28th (or 29th) at 11:59 PM.
- For Policy Compliance Reports, the report only includes live data at the time of the report being generated, not the full previous month.
- Daily: The report includes data from the previous 24 hours leading up to the scheduled run time.
- Notifications: Optional: Select a notification channel if you wish to be notified when a report is created by a schedule, and ready to be downloaded. The available channels are Email and Slack. To create a notification channel, see Set Up Notification Channels.
- Format: Select the format for you report. PDF is the default. JSON and CSV are only available when the report is a single table.
- Compression Format: Select the format compression for your report. Gzip (
.gz) and Zip (.zip) are supported. - Password Protection: Optionally, toggle this on to set a password on the report PDF that is created. Be sure to remember your password, as it cannot be reset once the report is created. This is supported for zip files, but is not supported for Gzip files.
Delete a Schedule
To delete a schedule:
Log in to Sysdig Secure.
Select Reporting > Scheduled Reports.
The Schedules page appears.
Select the three-dot icon of the schedule you wish to delete.
Select Delete.
