Editing Custom Reports

Custom reports are listed under the My Reports section, found in the Reports tab, and the left navigation pane.

The My Reports section lists all the custom reports created so far, the hosts that are reported on, and scheduling options. Click on the report name to view the report. Click the icon to delete a report. Click the icon to edit the corresponding custom report configuration details.

Editing an existing Custom Report

Click the icon to edit an existing custom report. You can find this icon besides the report listed in the My Reports section in the left navigation pane, and the Reports tab.

Clicking the icon opens the Edit Custom Report page.

In the Edit Custom Report page, edit the host and criteria in the Edit Host and Edit Criteria tabs.

1. Select the Edit Host tab to edit the hosts or host groups to report on.
2. Select the Edit Criteria tab to edit the event filters and message filters. There are two set of event type/severity lists, one list of filters for Windows hosts and the other list of filters for Syslog hosts.
   1. Edit the filters for the events generated by the hosts or host groups selected. Edit event type and event severity depending on the specific events that need to be collected for Windows and/or UNIX hosts.
   2. For Windows hosts, you can also filter events using Event ID. Choose the Event ID checkbox. With this, the text box and Event ID link get enabled and the Event Type / Event Severity filter selection gets disabled. Enter the Event IDs for which the events need to be collected. If the Event ID filtering is not selected, the Event Type / Event Severity filter selection gets enabled. Select the types of events for which the report needs to be generated, from the list of events under Event Type column.

The event types are:

1. Application
2. Security
3. System
4. DNS Server
5. File Replication Service
6. Directory Service

 

Select the severity of events for which the report needs to be generated, from the list of severity in the Event Severity row.

The event severity are:

1. Information
2. Success
3. Error
4. Failure
5. Warning

Any combination of event type and severity is possible and select the appropriate check boxes provided in a matrix format.

The unselected event type and severity will be excluded from the report.

3. Message Filters can be used to generate custom reports which includes (Log Message contains field) or excludes (Exclude field) an event with specific event log message texts. Use comma ',' to separate multiple log message texts.
4. For Unix hosts (i.e., Syslog), you can filter events using the Event Type / Event Severity filter selection. Select the types of events for which the report needs to be generated, from the list of events under Event Type column.

The event types are:

1. kernel
2. user
3. mail
4. daemon
5. auth
6. syslog
7. lpr
8. news
9. uucp
10. cron1
11. authpriv
12. ftp
13. ntp
14. logAudit
15. logAlert
16. cron2
17. local0
18. local1
19. local2
20. local3
21. local4
22. local5
23. local6
24. local7

 

Select the severity of events for which the report needs to be generated, from the list of severity in the Event Severity row.

The event severity are:

1. Emergency
2. Alert
3. Critical
4. Error
5. Warning
6. Notice
7. Information
8. Debug

Any combination of event type and severity is possible and select the appropriate check boxes provided in a matrix format.

The unselected event type and severity will be excluded from the report.

4. Click Save to save the edited report. Click Cancel button to cancel the edit operation.