Help Center/ SecMaster/ User Guide/ Situation Awareness/ Security Reports/ Checking a Security Report
Updated on 2026-10-10 GMT+08:00
View PDF
Share

Checking a Security Report

Scenarios

This section describes how to view a created security report and its displayed information.

Viewing a Security Report

  1. Log in to the SecMaster console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.

    Figure 1 Workspace management page

  4. In the navigation pane on the left, choose Situation Awareness > Security Reports.

    Figure 2 Security Reports

  5. Click the module where the target report is located. The report details page is displayed.

    On the report details page, you can preview details about the current security report.

Content in the Daily Report Template

Table 1 Content in the daily report template

Module

Description

Data scope

The default data scope of a daily report is from 00:00:00 to 23:59:59 on the previous day.

Report type

Report type.

Created

Time when the report was generated.

Security score

SecMaster evaluates the overall asset security, baseline configuration, threat alerts, and security vulnerabilities for the previous day (from 00:00:00 to 23:59:59). You can quickly learn the overall security status of assets. The score may differ depending on the SecMaster edition in use.

Baseline check

Displays the statistics of the latest baseline check, including the following information:

  • Total Check Items: the total number of check items in the latest baseline check.
  • Passed: the number of check items whose latest baseline check result is Passed.
  • Failed: the number of check items whose latest baseline check result is Failed.

Security vulnerabilities

Displays the vulnerability statistics of the accessed cloud services on the previous day, including the following information:

  • Total Vulnerabilities
  • Unfixed Vulnerabilities

Security response

Displays the security response statistics for the previous day, including the following information:

  • Alerts
  • Unhandled alerts
  • Alerts handled automatically (Auto)

Asset security

Displays the current asset security status, including the following information:

  • Total assets: total number of assets of the current account
  • Vulnerable assets: the number of assets with risks

Security analysis

Displays the security analysis statistics for the previous day, including the following information:

  • Security logs: total traffic of security logs on the previous day
  • Log models: the number of security log models

Asset risk

Displays the asset security status for the previous day, including the following information:

  • Attacked assets: the number of assets attacked on the previous day
  • Unprotected assets: the number of unprotected assets on the previous day
  • Vulnerable assets: the number of vulnerable assets on the previous day
  • Asset trend: asset change trend over the past seven days as of the previous day
  • Asset protection rate by asset type: asset protection rates by asset type on the previous day

Threat posture

Displays the threat posture of assets on the previous day, including the following information:

  • DDoS attacks: the number of DDoS attacks on the previous day
  • Network attacks: the number of network attacks on the previous day
  • Application attacks: the number of application attacks on the previous day
  • Server attacks: the number of server attacks on the previous day
  • New DDoS attacks from the previous day
  • Network/Server Attacks over Time
  • WAF Inspection (total number of WAF requests, number of WAF alerts, and number of WAF interception times)
  • Top 5 network attack types
  • Top 5 application attack type statistics
  • Top 5 server attack type statistics
  • Top 5 source IP addresses by application alerts
  • Top 5 Destination IP addresses by application alerts
  • Top 5 server alert distribution
  • Top 5 source IP addresses by network alerts

Log analysis

Displays the log analysis results for the previous day, including the following information:

  • Log sources: the number of log sources on the previous day
  • Log indexes: the number of log indexes on the previous day
  • Received logs: the total number of logs received on the previous day
  • Log storage capacity: the total number of logs stored on the previous day
  • Log volume change trend since the previous day
  • Access traffic statistics of top 5 log sources over the last seven days as of the previous day
  • Number of alerts generated by top 10 models on the previous day

Security response (details)

Displays the security response information for the previous day, including the following information:

  • Number of unhandled alerts on the previous day
  • Number of unhandled incidents on the previous day
  • Number of unfixed vulnerabilities on the previous day
  • Number of unfixed unsafe baseline settings on the previous day
  • Threat alert distribution and quantity on the previous day
  • Top 5 intrusion incidents by type on the previous day
  • Top 5 emergency response incidents on the previous day
  • Top 20 threat alerts handled on the previous day

Content in the Weekly Report Template

Table 2 Content in the weekly report template

Module

Description

Data scope

SecMaster collects security information from 00:00:00 on Monday to 23:59:59 on Sunday of the previous week.

Report type

Report type.

Created

Time the report was generated.

Security score

SecMaster evaluates the overall asset security, baseline configuration, threat alerts, and security vulnerabilities for the last day of the previous week. You can quickly learn the overall security status of assets. The score may differ depending on the SecMaster edition in use.

Baseline check

Displays the statistics of the latest baseline check in the previous week. You can check the following information:

  • Total Check Items: the total number of check items in the latest baseline check.
  • Passed: the number of check items whose latest baseline check result is Passed.
  • Failed: the number of check items whose latest baseline check result is Failed.

Security vulnerabilities

Displays the vulnerability statistics of the accessed cloud services for the last week, including the following information:

  • Total vulnerabilities: the total number of vulnerabilities.
  • Unfixed vulnerabilities: the number of unfixed vulnerabilities.

Security response

Displays the security response information for the previous week. You can check the following information:

  • Alerts
  • Unhandled Alerts
  • Alerts handled automatically (Auto)

Asset security

Displays the latest asset security information on the last day of the last week, including the following information:

  • Total assets: total number of assets of the current account
  • Vulnerable assets: the number of assets with risks

Security analysis

Displays the security analysis statistics, including the following information:

  • Security logs: total traffic of security logs in the last week
  • Log models: the number of security log models on the last day of the last week

Asset risk

Displays the latest asset security information on the last day of the previous week, including the following information:

  • Attacked assets: the number of attacked assets and the number of new attacked assets detected since last week
  • Unprotected assets: the number of unprotected assets and the number of new unprotected assets detected since last week
  • Vulnerable assets: the number of vulnerable assets and the number of new vulnerable assets detected since last week
  • Asset trend: asset changes over the previous week
  • Asset protection rate by asset type

Threat posture

Displays the latest threat posture on the last day of the previous week, including the following information:

  • Number of DDoS attacks
  • Number of network attacks
  • Number of application attacks
  • Number of server attacks
  • DDoS attacks since the last period
  • Network/Server attacks over time
  • WAF inspection (total number of WAF requests, number of WAF alerts, and number of WAF interception times)
  • Top 5 network attack types
  • Top 5 application attack types
  • Top 5 server attack types
  • Top 5 application attack sources distribution
  • Top 5 attacked application distribution
  • Top 5 HSS alert distribution
  • Top 5 network attack sources distribution

Log analysis

Displays the log analysis results for the previous week, including the following information:

  • Number of log sources
  • Number of log indexes
  • Total number of received logs
  • Log storage
  • Log volume changes
  • Top 5 log source access statistics
  • Number of alerts generated by top 10 models on the previous day

Security response (details)

Displays the security response information for the previous week. You can check the following information:

  • Number of unhandled alerts
  • Number of unhandled incidents
  • Number of unfixed vulnerabilities
  • Number of unfixed baseline settings
  • Threat alert distribution and quantity
  • Top 5 intrusion incidents by type
  • Top 5 emergency responses
  • Top 20 threat alarms

Content in the Monthly Report Template

Table 3 Content in the monthly report template

Module

Description

Data scope

By default, a monthly report includes security information for the previous month.

Report type

Report type.

Created

Time the report was generated.

Security score

SecMaster evaluates the overall asset security, baseline configuration, threat alerts, and security vulnerabilities for the last day of the previous month. You can quickly learn the overall security status of assets. The score may differ depending on the SecMaster edition in use.

Baseline check

Displays the statistics of the latest baseline check in the previous month, including the following information:

  • Total Check Items: the total number of check items in the latest baseline check.
  • Passed: the number of check items whose latest baseline check result is Passed.
  • Failed: the number of check items whose latest baseline check result is Failed.

Security vulnerabilities

Displays the vulnerability statistics of the accessed cloud services on the last day of the previous month, including the following information:

  • Total vulnerabilities: the total number of vulnerabilities
  • Unfixed vulnerabilities: the number of unfixed vulnerabilities.

Security response (overview)

Displays the security response information for the previous month. You can check the following information:

  • Total number of alerts
  • Unhandled Alerts
  • Alerts handled automatically (Auto)

Asset security

Displays the latest asset security information on the last day of the last month, including the following information:

  • Total assets: the total number of assets
  • Risky assets: the number of risky assets

Security analysis

Displays the security analysis statistics, including the following information:

  • Security logs: total traffic of security logs in the last month
  • Log models: the number of security log models on the last day of the last month

Asset risk

Displays the latest asset security information on the last day of the last month, including the following information:

  • Attacked assets: the number of attacked assets and the number of new attacked assets detected since last month
  • Unprotected assets: the number of unprotected assets and the number of new unprotected assets detected since last month
  • Vulnerable assets: the number of vulnerable assets and the number of new vulnerable assets detected since last month
  • Asset trend: asset changes over the previous month
  • Asset protection rate by asset type

Threat posture

Displays the latest threat posture on the last day of the previous month, including the following information:

  • Number of DDoS attacks
  • Number of network attacks
  • Number of application attacks
  • Number of server attacks
  • DDoS attacks since the last period
  • Network/Server attacks over time
  • WAF inspection (total number of WAF requests, number of WAF alerts, and number of WAF interception times)
  • Top 5 network attack types
  • Top 5 application attack types
  • Top 5 server attack types
  • Top 5 application attack sources distribution
  • Top 5 attacked application distribution
  • Top 5 HSS alert distribution
  • Top 5 network attack sources distribution

Log analysis

Displays the log analysis results for the previous month, including the following information:

  • Number of log sources
  • Number of log indexes
  • Total number of received logs
  • Log storage
  • Log volume changes
  • Top 5 log source access statistics
  • Number of alerts generated by top 10 models on the previous day

Security response (details)

Displays the security response information for the previous month, including the following information:

  • Number of unhandled alerts
  • Number of unhandled incidents
  • Number of unfixed vulnerabilities
  • Number of unfixed baseline settings
  • Threat alert distribution and quantity
  • Top 5 intrusion incidents by type
  • Top 5 emergency responses
  • Top 20 handled threat alerts

Related Operations

Parent topic: Security Reports