Example: Creating a Custom Report Based on a Saved Search

You can create reports by importing a search or creating custom criteria.

Create a report that is based on the event and flow searches you created in Searching Events.

1. Click the Reports tab.
2. In the Actions list, select Create.
3. Click Next.
4. Configure the report schedule.

   1. Select the Daily option.

   2. Select the Monday, Tuesday, Wednesday, Thursday, and Friday options.

   3. Using the lists, select 8:00 and AM.

   4. Make sure that the Yes - Manually generate report option is selected.

   5. Click Next.

5. Configure the report layout:

   1. In the Orientation list, select Landscape.

   2. Select the layout with two chart containers.

   3. Click Next.

6. In the Report Title field, type Sample Report.
7. Configure the top chart container:

   1. In the Chart Type list, select Events/Logs.

   2. In the Chart Title field, type Sample Event Search.

   3. In the Limit Events/Logs To Top list, select 10.

   4. In the Graph Type list, select Stacked Bar.

   5. Click All data from the previous (24 hours).

   6. In the Base this event report on list, select Example Search 1.

      The remaining parameters automatically populate by using the settings from the Example Search 1 saved search.

   7. Click Save Container Details.

8. Configure the bottom chart container:

   1. In the Chart Type list, select Flows.

   2. In the Chart Title field, type Sample Flow Search.

   3. In the Limit Flows To Top list, select 10.

   4. In the Graph Type list, select Stacked Bar.

   5. Click All data from the previous 24 hours.

   6. In the Available Saved Searches list, select Example Search 2.

      The remaining parameters are automatically populated by using the settings from the Example Search 2 saved search.

   7. Click Save Container Details.

9. Click Next.
10. Click Next.
11. Choose the report format:

    1. Click the PDF and HTML check boxes.

    2. Click Next.

12. Choose the report distribution channels:

    1. Click Report Console.

    2. Click Email.

    3. In the Enter the report destination email address(es) field, type your email address.

    4. Click Include Report as attachment.

    5. Click Next.

13. Complete the final Report wizard details:

    1. In the Report Description field, type a description of the template.

    2. Click Yes - Run this report when the wizard is complete.

    3. Click Finish.

14. Using the list box in the Generated Reports column, select the time stamp of your report.