Custom Reports contained in Group reports

cancel
Showing results for 
Search instead for 
Did you mean: 

Custom Reports contained in Group reports

L4 Transporter

Has anyone else had issues with creating custom reports and then having them emailed via the scheduler? I have built an extensive custom reports list that allows us to see into the detailed traffic to discover infections, spyware, and an assortment of other information to discover things that the PAN does not alert us on. The problem is, that the report that it generates does not look anything like the individual custom reports that I have created. If I run a custom report from the GUI, it shows the data, and only the data that I want - such as top 10. But the scheduled report group is crap. The custom reports that are included are not even recognizable to the custom reports I have created. The reporting seemed to work fairly decent back when we were on 4.1.2, but in 4.1.13, even after completely recreating the custom reports, is just garbage.

Anyone else experiencing issues like this?

The inherent vice of capitalism is the unequal sharing of blessings; the inherent virtue of socialism is the equal sharing of miseries.
1 ACCEPTED SOLUTION

Accepted Solutions

L4 Transporter

Had to completely recreate the reports.

The inherent vice of capitalism is the unequal sharing of blessings; the inherent virtue of socialism is the equal sharing of miseries.

View solution in original post

7 REPLIES 7

L4 Transporter

Hello

If the questions here is to have custom reports scheduled yes we can do it.

Create custom report then look for this report under Report groups, add that to the right side to select them. Later add this Report Group in the Email scheduler.

What I am more concerned is you seem to compare reports but I am not understanding what is the exact issue where the reports are not generated the right way. Can you pls share some examples so that we can share thoughts. It looks like if individual custom reports are generated they look different from Scheduled reports ?

Sorry if I was unclear.

You can create custom reports.

You can create a report group that has your custom reports contained within it.

You can schedule to have that report group sent via email.

The problem I am having is that the report group that is emailed containing the custom reports that I have created does not look like, is not formatted and filtered the same as if I just run the custom report under manage custom reports.

For instance, when I run one of the custom reports from manage custom reports in which I have configured it to show only specific zones, specific IP Ranges, and other specifics, and have configured it to sort and show only top 10, the report shows 10 rows and all of the information that I configured.... But, when I get the Daily report group sent to me, that same custom report that is included in the group report does not contain the information as I have defined it, and contains hundreds of rows instead of just the top 10 as I have configured.

The inherent vice of capitalism is the unequal sharing of blessings; the inherent virtue of socialism is the equal sharing of miseries.

L7 Applicator

You have selected the "Log View" version of your custom report, as opposed to the "Custom Report" version of your custom report.  You can change that in the Report Groups section.

In the screenshot below, I've created a single "CustomReport".  In the Report Groups section, that "CustomReport" shows up in 2 different places.

That should fix your problem.

Ha! I didn't even notice that. I will try that and see if it works. What is strange is that it was working fine until we upgraded to to 4.1.13.

The inherent vice of capitalism is the unequal sharing of blessings; the inherent virtue of socialism is the equal sharing of miseries.

Well using the custom report under the sub-directory custom report did not work. It actually just comes up as a blank page.

The inherent vice of capitalism is the unequal sharing of blessings; the inherent virtue of socialism is the equal sharing of miseries.

I've seen this happen when the "query" is mal-formed, or when the query is so specific that there are no matching logs.  What does your report definition look like?

L4 Transporter

Had to completely recreate the reports.

The inherent vice of capitalism is the unequal sharing of blessings; the inherent virtue of socialism is the equal sharing of miseries.

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!