Custom Reports

EventLog Analyzer can generate custom reports based on criteria set by you. You can specify the criteria with field values and logical operators. These reports will be listed under Custom Reports.

Create custom reports

1. Navigate to Reports and select Manage Reports at the bottom-left. In the Manage Reports dashboard, click +Add new reports button on the top-right.

2. In the Create Custom Report dashboard, enter a name for your report.

3. Click Select Device to generate reports for specific devices or applications.

4. Click Report Group to add the new report to the desired group. The drop down displays all available report groups under Custom Reports. Select one of these or create your own group and click '+'. If not specified, the custom report will be added to the Default Group.

5. Select the type of view for your report (see types of view).

6. Set the criteria for the report. You can add multiple criteria and perform AND or OR operations between them. You can also add criteria to groups and perform AND or OR operators between the groups.
Note:
• When the given criteria is separated by commas, it is treated as a separate criteria with OR condition. (Eg: If the criteria is given as EventID = 4678,4679 , then it is treated as EventID= 4678 OR 4679).
• If you intend to give a single criteria with a comma character, please use "," instead of "," .
7. Click Add to save.

Manage Custom Reports

User created Reports or Reports added via extension will be displayed here.

You can edit, delete, clone, or disable the custom reports.

1. Navigate to Reports. Click Manage Reports at the bottom of the left panel.
2. To edit a custom-made report, click on the adjacent edit icon and make the necessary changes. Click Update.

3. To delete a custom-made report, click on the adjacent delete icon. Click Yes in the pop-up box that appears.

4. To hide a custom-made report, click on the toggle button in the Show/Hide Column.

5. To share the reports with technicians, hover over the report and click on the share icon that appears. Select the technician(s) and click Share. The Notify recipients by mail option will send an email notification to shared technicians when the report is shared or unshared.

6. To clone a custom-made report, click on the clone icon in the Actions Column.

Types of views

Tabular View

This view displays the data in the form of a simple table. You just need to frame the criteria for selecting logs for the report. You can generate different views of the same tabular view report. To create a new view, refer the Manage Report Views section.

Summary View

This View provides a more granular representation of the log data. You can group the data by one or more fields (using the Group by option) and summarize it (using the Summarize data by option) with count, sum, average, or other metrics.

Summarize data by option:

This option is present in both the Summary and Pivot view configuration of Custom Reports and Report Views. You can summarize the data by the following metrics:

Count:

Shows the count of matching log entries within a specified group.

Count Distinct:

Shows the count of unique values based on a field.

Example: To determine the number of unique process IDs in a device.

Last Value:

Displays the most recent value of a field within the selected time frame.

Example: To get the EventId of recent log of a device

First Value:

Similar to Last value but instead of most recent value, it displays the initial value of a field within the selected time frame.

Sum:

Shows the total sum of values within a selected numeric field.

Example: To find the total number of bytes transferred across each day grouped by device.

Average:

It shows the average value of a selected numeric field.

Note: When you apply only one Group by, a graph would be generated. When you apply more than one Group by, a graph would not get generated, but the data would be displayed in a table.

Pivot View

The Pivot View allows you to organize and summarize data in a tabular format using rows and columns. You can filter column field values by selecting up to five custom values or by choosing the top or least five values. This view is especially helpful for tracking specific data points, with each selected value displayed as a separate column, and the chosen metric shown under the Summarize Data by option.

The image above displays the count of different values of Result across the 5 custom Severity values.

Note: A Report criteria needs to be framed for a custom report based on Summary/Pivot View

Multi Report View

This view is useful to monitor numerous reports at one glance. It will give you a holistic view of the reports that you have added to the multi report. In this view, each report has a View Report button that navigates to the original report.

Custom Widget

You can create a Custom Report based on the available custom widgets or create a custom widget and use it.