Log Analyzer Reports

SapphireIMS provides a number of reports for Log Analysis and Netflow. In addition to built-in reports, custom reports can be created. The reports can be viewed on the browser, saved into a PDF or Excel file or sent via e-mail.

Built-in Reports

Click on 'Reports' and further click on 'Log Analyzer Reports'. The list of reports is displayed.

To add new reports refer to the next section.
To delete an existing report, select the report and click on 'Delete'.
Click on to edit Built-in reports or to edit User defined reports.
Click on the report title to view the report. For example, if the report 'Events based on Log Host' is selected, the following is displayed.

Expand 'Analyze Filter' by clicking on '+' to create filter rules. Refer the section 'Analyze Filters' under the corresponding Logs for details on creating filters (for syslog refer Fault->Syslog->Setting up Analysis Filters).
Click on to save this as a new report.
To save the report as a PDF file, click on . Further refer to the section on saving as a PDF under the corresponding topic (for syslog refer Fault->Syslog->Saving Views and Reports as a PDF file).
To export the report into an Excel, click on . Further refer to the section on exporting as an Excel under the corresponding topic (for syslog refer Fault->Syslog->Exporting Views and Reports to an Excel file).
To mail a report click on . The screen below is displayed.

Enter the 'Subject', the 'Message text' and the recipients e-mail addresses.
Select the 'Language' and 'Time zone'.
Click on 'Send'. The report is attached and sent as an e-mail.

Adding a new Report

Click on 'Add' in the reports listing screen to add a new report.

The fields are described below.

Serial No	Field Name	Description
1	Report Title	The title of the report
2	Report Description	Brief description of the report to be created.
3	View Type	Choose report type among 'Chart', 'Summary' or 'Raw Data' reports.
4	Log Type	Select the Log Type among the following: Event Log Syslog SNMP Traps Application Logs Netflow
5	Aggregate By (Summary Reports)	Field to use for aggregating the counts
6	Based on (Summary Reports)	The field to use for the row wise reporting in the summary table
7	Field Selection (Summary and Raw Data)	Fields to display in the columns
8	Time Period	Time period for the report
9	Chart Configuration (Chart Type)	Select the Chart Type from 'Area', 'Bar', 'Line', 'Pie', 'Stacked Bar'. Aggregate by: Select the field to aggregate the data Filter by: Select from Top N or Bottom N Chart Title: Enter the title for the chart X-Axis Name: Enter a label for the X-Axis Y-Axis Name: Enter a label for the Y-Axis Click on 'Add Chart' to add the chart in the report. You can repeat the steps to add multiple charts.
10	Node Selection	Use this section to add devices for which the report needs to be generated. Select the criteria for host selection which could be based on Node, Domain, OU, OS, Device Category or Baseline Compliant Nodes. Select the OU/Domain/OS/Device Category/Baseline Compliant Nodes if applicable Select hosts lists the available hosts based on the filter conditions selected. Select the host and click the ‘Add Host’ button.
11	Access To	Roles: Select the Role(s) for which all users who are allocated the role will have the report access. Users: Select the User(s) for whom the report access needs to be provided. If no user is selected then the report would be available to the user who has created the report, by default Access Permissions: Select the appropriate checkbox to provide 'View', 'Edit', 'Delete' or 'All' access permissions. Once the users/roles and access permissions are selected, click on 'Add' to add the access.
12	Filters	Configure the Analysis Filters. Refer to the section on Analysis Filters under the respective Logs topics.

Click on 'Save' to add the report.