I manage an Cisco IPS 4240 with IPS Manager Express. I want to make reports with "top attackers" for the last month but the events available in the appliance is only for the last 15-20 hours.
How do I make reports for a larger time frame? What do I need? I dont think IME is sufficient.