Help Document

Generating correlation reports

There are three types of reports available under Correlation section of Log360 Cloud:

Incidents overview report

This report gives you a summary of the recent incidents that have happened recently. To access this report,

  • Click on the Correlation tab.
  • Select Recent Incidents from the left menu.
Generating correlation reports

Incident Report

An incident report provides information about every correlation rule that's enabled. It also displays the number of times a specific rule has triggered a correlation report.

To access incident report:

  • Click on the Correlation tab.
  • Select the desired rule name from the left pane.
Generating correlation reports

Timeline View

The Event timeline gives details of all the events in the sequential order.

  • To get the Event timeline for each incident on the table, click on Event Timeline link corresponding to the specific incident.

    Generating correlation reports

    Generating correlation reports

  • To view the details of each log, click on Details next to each event. Generating correlation reports

    Event logs that match the correlation rule but exceed the search retention days can be reloaded.

    Make use of the Reindex option to reload archived event logs.

    Generating correlation reports

Exporting Reports

You can export all the correlation reports in either PDF or CSV format.

  • Navigate to the required report, and click on the Export As option available on the top right corner.
  • Select the format from the dropdown list to download the report.

The status of all the previously exported can be found in the Report export history ( icon-history ) icon, next to the Export As button.

Generating correlation reports