Troubleshooting: The report export does not have the message field in EventLog Analyzer
Issue description
In EventLog Analyzer, users may encounter that the Message field is not available while exporting specific reports. This typically occurs when the selected report or its associated data source lacks the inclusion of the Message field, which usually contains detailed event descriptions or log messages. Learn how to find the root cause of this issue and how to resolve it, ensuring that the exported reports contain complete event details as required.
Possible causes
Report type limitation: Certain predefined or custom reports may not include the Message field by default.
Field configuration missing: The Message field may not have been enabled in the report’s column selection before export.
Older product version: Older builds of EventLog Analyzer may lack enhancements or bug fixes for report exports.
Prerequisites
Before you begin, ensure:
You have administrative privileges in EventLog Analyzer.
The product is upgraded to the latest build version.
The data source generating logs includes event details in the Message field.
Backup your EventLog Analyzer configuration by taking a VM or server snapshot, if necessary, before making changes.
Resolution steps
Step 1: Verify report configuration
Navigate to Reports and select the specific report.
Click Add or Remove columns located in the top-right corner.
Ensure that Message is selected for inclusion in the report.
Click Save and retry the export.
Step 2: Check data source compatibility
Verify the log format from the data source (e.g., Windows, Cisco, FortiGate, etc.) is included in the predefined supported sources list. For the complete list, see Supported data and log sources. Confirm that the Message field or equivalent event details are present in the original log entries. You can review the logs in detail by using the Search tab. For
If absent, check the source device configuration to include event descriptions or configure the custom log parsing to include the necessary fields for your source. For more information, see How to extract new fields.
Step 3: Update EventLog Analyzer
Step 4: Contact support
If the above steps don’t resolve the issue, contact the EventLog Analyzer support team here. Kindly provide the following details with relevant screenshots:
Report name and type.
Current build version of EventLog Analyzer.
Report export PDF.
A complete window screenshot of the Search tab.
A complete window screenshot of the report from the Reports section.
The latest product logs gathered in a zipped file (ManageEngine\EventLog Analyzer\logs).
Tips
Always review report customization: Ensures required fields (like Message) are included before generating or exporting reports.
Regularly update to the latest build: Leverages product enhancements, fixes, and improved report generation features.
Test exports before production use: Verifies the completeness of data before sharing with stakeholders.
Maintain documentation: Keeps track of custom report configurations for future reference.
How to reach support
If the issue persists in spite of following the above steps, feel free to contact our support team.
Support Channels:
Toll-Free (US): +1 844 649 7766
New to ADSelfService Plus?
Related Articles
How to modify the report Export Limit in EventLog Analyzer
Objective EventLog Analyzer allows administrators to export report data for external analysis or archival. By default, the export limit is set to 20,000 records to ensure optimal performance and user experience. This limit can be adjusted to meet ...
How to change the report attachment format in EventLog Analyzer
Objective EventLog Analyzer allows you to configure how reports are attached when exported or emailed. You can choose between PDF or CSV formats, ensuring that reports are shared or stored in a format that best suits your operational and compliance ...
Unable to start EventLog Analyzer
Issue description This issue occurs when the EventLog Analyzer service fails to start, or when users are unable to access the web client through the browser (typically on ports 8400 or 8445). Users may experience one or more of the following ...
How to schedule a report in EventLog Analyzer
Objective EventLog Analyzer enables you to automate the generation and delivery of reports through its Scheduled Reports feature. This helps ensure timely access to log insights without manual intervention. Reports can be scheduled at predefined ...
Troubleshooting guide: EventLog Analyzer UI is unresponsive
Overview This document outlines the common causes and recommended steps to resolve the issue when the EventLog Analyzer UI becomes unresponsive. Possible causes Insufficient system resources High CPU or memory usage on the server. Low disk space in ...