To generate a report in EventLog Analyzer, create a report profile, using the following menu option:
To create a report profile refer to the procedure given in the ‘How to create custom reports’ section.
How to edit report profile?
On the table row of a specific profile, Edit icon can be used to edit the report profile.
How to delete report profile?
Select the report profile(s) by selecting the respective check box(es).
Delete the profile(s), using the Delete menu link.
To edit the report profile, select the respective report profile's edit icon.
In the My Reports table, the entire user created report profiles are displayed with the name of the profile, devices assigned to the profile, last scheduled report, and provision to add a new schedule to this profile.
Import and Export Profiles
EventLog Analyzer alert, filter, and report profiles can be exported in XML file format. This can be imported back to the same or other EventLog Analyzer installation. The menu links for export and import of each profile is available in the screens of the respective tabs.
Export profiles using:
Settings tab >Admin Settings: Report Profiles: My Reports: Export
Import profiles using:
Settings tab > Admin Settings: Report Profiles: My Reports: Import
How to import profiles?
Enter the location of the file (XML format) containing the profile to be imported.
Alternatively use the ‘Browse’ button to find the file and the location.
Complete the import profile operation with Import button.
When a report profile is created, optional scheduler is created for automatic, periodical report generation and distribution. Report profile can also be created without scheduler by choosing the option to generate report ‘Only once’. For the unscheduled report profile, a scheduler can be created later. If the report profile is already scheduled, new scheduler can be created for that profile, superseding the previous scheduler.
To create a scheduler for a report profile, use the following menu option:
- Settings tab > Admin Settings > Report Profiles > Schedule: Add
To create a schedule, follow the steps given below:
Enter a unique name for the schedule.
Select a report profile to which the schedule should be associated with.
Enter email IDs to distribute the generated reports via email.
If the email server is not configured, configure the Mail server.
Select the time period (Hourly, Daily, Weekly, Monthly or Only once) at which the report should be generated.
Select the specific time at which the report is to be generated initially.
Select the time duration for which the report is to be generated.
1. How to disable/enable schedule?
Use the Enable/Disable icon to enable or disable the schedule.
2. How to edit schedule?
On the table row of a specific schedule Edit icon is available.
Use the Edit icon to edit the selected schedule.
3. How to delete schedule?
Use the Delete icon to delete the respective schedule.
In the Schedules table, all the schedules created are displayed with the name of the schedule, report profile associated to the schedule, type of the schedule, and details of the reports generated as per schedule. The enable/disable option, edit option, delete option are also available in the Schedules table.
Ask ME Reports
Ask ME enables managers and other non-technical staff to answer simple but critical questions about important network events that are of greater importance. The The Ask ME section offers a quick way to see just the reports that you need, without having to create a new report profile, or drilling down through the pre-defined reports.
Ask ME section shows a series of questions.
- Select the area of interest - login/logoff, users, alerts, etc. If you are not sure, it is set to the default All Questions option.
- Select the appropriate question for which you need an answer.
- Click on Get the Answer.
If you want more questions to come up in the Ask ME tab, click the Tell us here link. In the form that opens up, enter the question and describe it shortly. Once you are done, click Send. The EventLog Analyzer Technical Support team will analyze your question, and if found valid, will include it in upcoming releases of EventLog Analyzer.
The report corresponding to the question selected is now generated and displayed. With the enhancement of this feature, you can add the custom questions dynamically under this tab.
Adding Custom Questions in Ask ME
Follow the procedure given below to add custom questions in the Ask ME tab.
- To add a new question, first create a custom report which you want to use as answer (report) for this new question.
- Open the AskMe.xml file located in the <EventLog Analyzer Home>\server\conf directory.
- Append a new "Question" and "link" tag in the file. Enter your question in the "Question" tag and enter the URL of the custom report you have created in the "link" tag.
Example entry for "Question" and "link" tags are given below:
<Question>How many times objects and folders are accessed in the hosts added?</Question>
- Select the custom report in the Web Client UI.
- Copy the URL shown in the Address Bar of the browser.
- Cut the initial part of the URL "http://<ELA server host:port>/event/" and copy it in the "link" tag. Replace all the '&' symbols with '&' in the copied "link" tag.
4. Save the file.
Refresh the Web Client Ask ME section. You will see the new question added is listed at the bottom of the list. Select the custom question you have added and click Get the Answer. The report corresponding to the custom question will be displayed.