How and when to choose Summary View for creating custom report in EventLog Analyzer

How and when to choose Summary View for creating custom report in EventLog Analyzer

Objective

 This article offers you the steps to create custom report as Summary View in EventLog Analyzer. It will guide you through the process of generating custom report as Summary View and offer a brief idea on when to use this option for your specific needs.

Prerequisites

  • Administrative role on the EventLog Analyzer user interface or Custom Report creation role.
  • Knowledge of the data sources and events you want to include in the report
  • Knowledge of what and when a Summary View option has to be selected.

Steps to follow

Summary View gives you a more granular representation of the log data. It allows you to select multiple criteria based on which data will be displayed. After framing the report criteria, you need to select the fields based on which the summary view report will be generated.
  1. Log in to EventLog Analyzer.
  2. Navigate to the "Reports" section.
  3. Click on Manage Report and Choose "+ Add New Report"
  4. Enter a name for your custom report and select the data sources you want to include.
  5. Click Report Group to add the new report to the desired group. The drop-down displays all available report groups under Custom Reports. Select one of these or create your own group and click '+'. If not specified, the custom report will be added to the Default Group.
  1. Select the Summary View in Report Type.
  2. Set the criteria for the report. You can add multiple criteria and perform AND or OR operations between them. You can also add criteria to groups and perform AND or OR operators between the groups.
  3. You can use the field values available in the application. You can extract custom fields as per your requirement, which can be used while creating a custom report. Refer how to extract custom fields in EventLog Analyzer to know more.
NOTE: The Summary report will be built based on the criteria that you have set here.
  1. Choose the Summary Report Fields and build the structure based on which you want to create the summary.
    Process:
    1. Understand the use case of creating custom report and upon which value you want to get the summary.
    2. Create the fields based on the order upon which you want it to be represented. Refer Sample use case for better understanding.
  1. Click Add to Save them

Sample Use Case: 
Example: "I have multiple domains in my organization and want to view the count of events occurring on Windows devices, along with the source of these events and their severity."
In the above case, the requirement is that the user does not want to see the actual events, but just the count which has to be grouped based on Source and their severity on Windows devices. User has also mentioned they have mutiple domains.
Domain is the largest unit here and it can be further classified better as Devices. A Source can have mutiple Severity so Devices followed by Severity and then by Source. So starting from the larger scope, the Summarization can be better presented as follows:
"Domains" and then by "Device", and then by "Severity", and then by "Source". (Image below)
 
Results:
You can scroll down to view the full report.

Tips

  • Build the report criteria effectively to get the results to achieve the requirement achieved.
  • Regularly review and update your custom reports to ensure they meet your changing requirements.
  • Use Edit/Update option for the report customization options to tailor the report to your specific needs.
  • You can use Search tab to build the criteria easily for your custom report. Check out How to build criteria using Search for custom report in EventLog Analyzer to know more

                  New to ADSelfService Plus?