Barracuda Networks offers a variety of reports on the Incident Response Reports page. There are seven built in reports listed under Barracuda's Reports that can be manipulated by setting column filters or choosing what and how data will be displayed. Once to your liking, they can also be named and saved for future use. These customized reports can be found under My Reports.
Insights from these reports can allow you to quickly understand the types of attacks targeting your organization and more effectively mitigate future attacks. You can also use this information to make your security training more impactful.
Report data is real time, meaning it is constantly updated with the latest information.
Barracuda's Built In Reports
Found under Reports > Report list in the left navigation, these reports are designed to provide robust information about email-borne threats reaching your organization.
Workflows triggered
Information about workflows automatically kicked off. See Automated Workflows for more information.
Incidents created
Displays the number of incidents you created. See Creating an Incident to learn more.
Threats remediated
Displays the number of threats remediated by Incident Response.
Top attacked users
Information about each attack. The graphic display shows the users that received the most attacks.
Top automated workflows
Data captured when automated workflows are triggered. The graphically displayed information is a bar graph showing the names of the top workflows and event types associated with each (Conditions, Triggers and Actions taken). See Automated Workflows for more information.
Top automated workflows' taken action
A subset of the Top automated workflows report, this comprises of data related to the actions that took place at the end of the automated workflows.
Top email reporters
Reporters of potentially suspicious emails and related information. The total number for each user is displayed in the chart along with how those emails were handled (Submitted, Dismissed, or Remediated).
Customize and Save Reports
Each report can be customized in various ways. Once a report is to your liking, you can name and save it for future use. The new report is then found in the left navigation under My Reports. Once saved, new data is displayed matching your customization.
Time format – Depending on the grouping of data (see Grouped by above), the displayed graph or chart can show data gathered Monthly, Weekly, or Daily. If this option is available it will be at the top right, under the Export as button.
Visual display format – If available with this report type, you can choose how the data will be visually represented. Clicking the desired option to see it as a bar chart, or to view it as a line graph. (See above image.)
Text search – Anything entered in the Search box below the graph will be matched against data in any of the available table columns (whether those columns are displayed or not).
Date range – Click the calendar icon
and select from the left side of the popup to view data from the Last 24 hours, Last 7 days, Last 30 days, Last 90 days, or Last 6 months. Or use the calendar displays in the popup to choose the start and end date of any period in the last 6 months.
Top number – The Display dropdown is available for reports showing "Top" metrics. Limit the data in the chart by selecting Top 5, Top 10, or Top 15.
Edit columns displayed – Click the Edit columns button to select or deselect the columns to display in the table below. A flyout appears on the right side of the screen. Check or uncheck boxes to make your selections. Enter a column name in the search box to quickly find or limit column options.
Grouping table data – This is a powerful way to organize information in the data table. The light blue horizontal bar shows the current grouping. If no grouping is in effect, it will read "Drag a column header and drop it here to group by that column."
To create grouping, click on the
icon over one of the table columns and drag it into the light blue bar. The table will then reorganize to fit the new grouping.
In the example below, data is initially grouped by Reporter, meaning all data is gathered and displayed for each reporter. The first reporter shown, lnguyen@bostonbrew.dev will have all associated information displayed in the table, before moving on to another reporter. Status has been added for secondary grouping. Here all data associated with lnguyen@bostonbrew.dev and having the status Submitted will be shown before moving on to another status type.
You can add or delete groupings at will. To remove a grouping, simply click on the X on a grouping chip in the light blue bar. Grouping can also be removed by clicking on the filter icon
for a column and then clicking Ungroup... at the bottom of the filter window. (See Column filtering below.)
Column filtering – You can also add filtering to individual columns. Click on the filter iconto see and use filter options.
Saving a customized report – Once you have customized a report to show table and graph data to your liking, click the Save as button at top right. Then in the popup box, enter a name and click Save. Your new report can be found under My reports in the left side navigation. Clicking on the pin icon will make that your default report and it will be displayed each time you return to Incident Response Reports.
Other Report Features
Export – Click Export as and then select Data CSV to export all data available in the table columns in CSV (Comma Separated Value) format. Click Export as and select Summary PDF to create a PDF of the displayed graph.
Note: the maximum number of lines that can be exported is 10,000.
Schedule report creation – In the main navigation at top-left, go to Reports > Scheduled reports. Scheduled Reports allows you to select when a report will be generated. For example, you can choose to have the Threats Remediated report covering the last 24 hours run each morning. Learn more.
Set a default report – Click on a report in the left navigation. Once highlighted, click again on the pin icon 
to make that the default report. Afterwards, whenever you return to the Incident Response Reports, it will automatically be displayed. It can be one of the built in Barracuda's reports or one you have customized and saved in My reports.