Editing Custom Reports


 

Custom reports are listed under the My Reports section, found in the Reports tab, and the left navigation pane.

 

The My Reports section lists all the custom reports created so far, the hosts that are reported on, and scheduling options. Click on the report name to view the report. Click the delete icon to delete a report. Click the Edit custom Report icon to edit the corresponding custom report configuration details.

Editing an existing Custom Report

Click the Edit custom Report icon to edit an existing custom report. You can find this icon besides the report listed in the My Reports section in the left navigation pane, and the Reports tab.

 

Clicking the Edit custom Report icon opens the Edit Custom Report page.

 

In the Edit Custom Report page, edit the host and criteria in the Edit Host and Edit Criteria tabs.

  1. Select the Edit Host tab to edit the hosts or host groups to report on.
  2. Select the Edit Criteria tab to edit the event filters and message filters. There are two set of event type/severity lists, one list of filters for Windows hosts and the other list of filters for Syslog hosts.
    1. Edit the filters for the events generated by the hosts or host groups selected. Edit event type and event severity depending on the specific events that need to be collected for Windows and/or UNIX hosts.
    2. You have two options (Basic Options and Advanced) to filter the messages under two tabs.
      1. Basic Options tab
        In the basic option, when multiple values are entered, all the values are considered for filtering events.
        • You will find Drop the Logs containing text box to drop the logs containing the message(s).
        • You will find Except text box to exclude an event with a specific event log message.
        • You will find Event Source text box to filter out events received from a specific event log source.
        • You will find User text box to filter out events received for a specific user. This field is effective only for Security (Important) events.

        Multiple values can be entered in the text boxes separated by commas.

      2. Advanced tab
        In the advanced option, when multiple values are entered, any of the values or all the values are considered for filtering events depending up on the selection of Match Any or Match All radio buttons.
        • You will find Match Any and Match All radio buttons for Drop the Logs containing text box to drop the logs containing the message(s).
        • You will find Match Any and Match All radio buttons for Except text box to exclude events with a specific event log message, from filtering out.
        • You will find Event Source text box to filter out events received from a specific event log source.
        • You will find User text box to filter out events received for a specific user. This field is effective only for Security (Important) events.
        Multiple values can be entered in the text boxes separated by commas.
    3. For Windows hosts, you can also filter events using Event ID. Choose the Event ID checkbox. With this, the text box and Event ID link get enabled and the Event Type / Event Severity filter selection gets disabled. Enter the Event IDs for which the events need to be collected. If the Event ID filtering is not selected, the Event Type / Event Severity filter selection gets enabled. Select the types of events for which the report needs to be generated, from the list of events under Event Type column.
  3. The event types are:

    1. Application
    2. Security
    3. System
    4. DNS Server
    5. File Replication Service
    6. Directory Service

     

    Select the severity of events for which the report needs to be generated, from the list of severity in the Event Severity row.

    The event severity are:

    1. Information
    2. Success
    3. Error
    4. Failure
    5. Warning

    Any combination of event type and severity is possible and select the appropriate check boxes provided in a matrix format.

    The unselected event type and severity will be excluded from the report.

    1. For Unix hosts (i.e., Syslog), you can filter events using the Event Type / Event Severity filter selection. Select the types of events for which the report needs to be generated, from the list of events under Event Type column.

    The event types are:

    1. kernel
    2. user
    3. mail
    4. daemon
    5. auth
    6. syslog
    7. lpr
    8. news
    9. uucp
    10. cron1
    11. authpriv
    12. ftp
    13. ntp
    14. logAudit
    15. logAlert
    16. cron2
    17. local0
    18. local1
    19. local2
    20. local3
    21. local4
    22. local5
    23. local6
    24. local7

     

    Select the severity of events for which the report needs to be generated, from the list of severity in the Event Severity row.

    The event severity are:
  1. Emergency
  2. Alert
  3. Critical
  4. Error
  5. Warning
  6. Notice
  7. Information
  8. Debug

Any combination of event type and severity is possible and select the appropriate check boxes provided in a matrix format.

The unselected event type and severity will be excluded from the report.

  1. Click Save to save the edited report. Click Cancel button to cancel the edit operation.

     

Copyright © 2012, ZOHO Corp. All Rights Reserved.
ManageEngine