Cisco Secure Access Help

PDF

Cisco Secure Access Help

Monitor Secure Access with Reports

Updated: September 15, 2026

Want to summarize with AI?

Log in

Describes Monitor Secure Access with Reports. Use Cisco Secure Access reports to monitor your Secure Access deployment and to better understand your Secure Access usage.

Use Cisco Secure Access reports to monitor your Secure Access deployment and to better understand your Secure Access usage. Gain insights into request and block activity, determining which of your sources are generating blocked requests. Reports help build actionable intelligence in addressing threats including changes in usage trends over time.

Available Reports

  • Remote Access Logs—Lists users that have remotely connected to Secure Access and requested access to destinations.

  • Activity Search—Search for activity from the sources in your environment over a selected time period.

  • Connectivity Logs—View the events for each tunnel within your Network Tunnel Groups. Address risks as they arise by troubleshooting connectivity issues and confirm traffic is securely transmitted between devices and Secure Access.

  • Security Activity —Lists security-related activity in your environment over a selected time period.

  • Total Requests Report —Provides a visualization of traffic trends over a specified time period in your environment, based on selected categories, traffic types, and responses.

  • Activity Volume Report —Provides a summary of traffic by security categories and policies influenced by content categories and Destination Lists, highlighting allowed and blocked traffic, and identifying potential risk activities within the organization.

  • App Discovery—Provides information about the cloud apps in use in your environment.

  • Top Destinations—Lists the top traffic-generating sources over the selected time period. Filterable by source and destination.

  • Top Categories—Lists the most popular security and content categories for your organization over the selected time period.

  • Third-Party Apps—Lists third-party cloud applications that have been authorized to access sanctioned tenant applications.

  • Data Loss Prevention—Lists security events related to content classified as personally identifiable or sensitive information.

  • Data Security Posture Management—Lists posture, recommendations, scan coverage, risky asset owners, high-risk assets, and analytics.

  • Cloud Malware—Lists malicious files detected within your organization and provides details of the potential risk and exposure these files present.

  • Admin Audit Log—Lists a record of any configuration changes made to your settings by any of your Secure Access administrators.

Export Report Data to CSV

Some reports let you export the results of a query to the CSV format. This lets you create other reports and graphs by feeding this data to other tools.

Note
The timezone of exported data is always the timezone selected for your account. You can change this for your account at Admin > Account.

Exportable reports:

Troubleshooting

Depending on the time range and filters applied to the exported report, some report exports may take a very long period of time to generate and, in some cases, will time out. However, the timeout is not reflected in the dashboard. Instead, status is set to Generating... and persists. Typically, this happens somewhere between 12 to 24 hours after the report export is first begun. If this situation occurs, rerun the report export with a shorter date range, fewer rows, or more detailed filters.

Before you begin

A minimum user role of Read-only. For more information, see Manage Accounts.

Procedure

  1. Navigate to Monitor > Reports > <report> and click Export CSV .


    Is first begun. If this situation occurs, re-run the report export with a shorter date range, or more filters applied. Navigate to Monitor Reports report and click Export CSV.

    For Remote Access Logs, the selected time range and applied filters are used for the export, including filters selected from the filter menu or added from a table value.

    Click Download in the case of the Third-Party Apps, Cloud Malware, and Data Loss Prevention reports.

  2. Give your report a good Report Title, add the number of rows of data to be returned, and click Export.

    Export Report to CSV screen showing fields for Report Title and number of rows, with an Export button.
    Note
    When exporting to CSV, data is limited to a maximum of 100,000 rows. Due to the queue-based processing system, reports may experience significant latency. To minimize wait times, consider running reports for shorter time periods, reducing the number of rows to be exported, or applying more detailed filters. For efficient management of large datasets, check the last row of the initial report and then run the report again from that point for the next segment of data.

  3. When you click Export, you are taken to the Exported Reports page to download your CSV file.


    The Exported Reports interface.

  4. Find this page at any time by navigating to Monitor > Management > Exported Reports.

Bookmark and Share Reports

Secure Access stores the report state in the URL, making it easy to share a report with colleagues or bookmark a report for future use.

Before you begin

A minimum user role of Read-only. For more information, refer to Manage Accounts.

Procedure

  1. Navigate to Monitor > Reports > <report>.

  2. Filter the report to display the data you need.

  3. Use your browser's bookmark function. When you retrieve the bookmark the report will have the same filters applied. You can also share the URL of the page with any colleague in your organization with access to your dashboard.

    If the report has a relative date filter—last 24 hours, last 7 days, and so on—the relative date is applied. If the report has an absolute date filter (for example, Jan 7, 2019), the absolute filter is applied.