Custom Reports contained in Group reports

[craymond]

Has anyone else had issues with creating custom reports and then having them emailed via the scheduler? I have built an extensive custom reports list that allows us to see into the detailed traffic to discover infections, spyware, and an assortment of other information to discover things that the PAN does not alert us on. The problem is, that the report that it generates does not look anything like the individual custom reports that I have created. If I run a custom report from the GUI, it shows the data, and only the data that I want - such as top 10. But the scheduled report group is crap. The custom reports that are included are not even recognizable to the custom reports I have created. The reporting seemed to work fairly decent back when we were on 4.1.2, but in 4.1.13, even after completely recreating the custom reports, is just garbage.

Anyone else experiencing issues like this?

[Phoenix]

Hello

If the questions here is to have custom reports scheduled yes we can do it.

Create custom report then look for this report under Report groups, add that to the right side to select them. Later add this Report Group in the Email scheduler.

What I am more concerned is you seem to compare reports but I am not understanding what is the exact issue where the reports are not generated the right way. Can you pls share some examples so that we can share thoughts. It looks like if individual custom reports are generated they look different from Scheduled reports ?

[craymond]

Sorry if I was unclear.

You can create custom reports.

You can create a report group that has your custom reports contained within it.

You can schedule to have that report group sent via email.

The problem I am having is that the report group that is emailed containing the custom reports that I have created does not look like, is not formatted and filtered the same as if I just run the custom report under manage custom reports.

For instance, when I run one of the custom reports from manage custom reports in which I have configured it to show only specific zones, specific IP Ranges, and other specifics, and have configured it to sort and show only top 10, the report shows 10 rows and all of the information that I configured.... But, when I get the Daily report group sent to me, that same custom report that is included in the group report does not contain the information as I have defined it, and contains hundreds of rows instead of just the top 10 as I have configured.

[jvalentine]

You have selected the "Log View" version of your custom report, as opposed to the "Custom Report" version of your custom report.  You can change that in the Report Groups section.

In the screenshot below, I've created a single "CustomReport".  In the Report Groups section, that "CustomReport" shows up in 2 different places.

That should fix your problem.

[craymond]

Ha! I didn't even notice that. I will try that and see if it works. What is strange is that it was working fine until we upgraded to to 4.1.13.

[craymond]

Well using the custom report under the sub-directory custom report did not work. It actually just comes up as a blank page.

[jvalentine]

I've seen this happen when the "query" is mal-formed, or when the query is so specific that there are no matching logs.  What does your report definition look like?

[craymond · Accepted solution]

Had to completely recreate the reports.