Reports
The reports section of op5 LogServer has to main functions:
•Auto reports: Does scheduled searches and sends them to a list of user via e-mail, or save them in a folder on your file server.
•Summary reports: Gives you top 10 hosts based on hits for each filter you have access to, and create graphs (message per minute) from global/private filters.
Auto Reports
Creating auto reports
If you wish to create an Auto report - for instance you might want a log of failed password login attempts sent to you weekly - you should start by creating the appropriate search filter. See section
Search Filters on page 8 for information on how to create filters.
If you have your search filter ready and wish to us it to create a report, click Reports in the top menu, and click Add new report.
•Create the appropriate search filter
•Click Reports in the top menu
Auto report Parameters
Report name
This is the name of the report you are creating. Choose a name that is descriptive - not only for your own sake, but also for your colleagues.
Sometimes it is a good idea to use your own name as part of the report, for future reference.
Description
Brief decription of your report.
Search filter
Choose your search filter from the menu.
Recipient Type
•Choose Email if you want the report to be sent via e-mail.
•Choose path if you want the report tot be created on a file server. You need to mount the file share on your op5 LogServer server in order to have a local path. See
Using Remote Storage.
Email Recipients or File Path
Enter the email addresses that should receive the report (separated with comma ‘,’), or the path in which it should be saved.
Generating Interval
Choose - Every hour, Every 6 hours, Every 12 hours, Daily, Weekly or Monthly - How often the report should be genreated.
Click “Save” when you are done filling out the fields and then your report will be created.
Manage an Auto Report
When you have created your report, it will show up every time you click Reports in the page top menu.
Edit
To edit a report
•Click on the

to the right of the auto report, or double click on the row in the list.
•Edit the fields you want to change and click on “Save”.
Deleting
To delete a report
•Click on the

to the right of the report
•Click OK on the popup
Send now
You can force a send of the selected report by clicking the envelope

.
Summary reports
The global and private summary reports is used to:
•Print graphs over how many logs matches a filter
•Display statistics over top 10 hosts found with a filter
To be able to add or delete a report your user have to belong to the group ‘Filter administrators’.
To veiw a report your user only have to belong to the ‘Summary viewers’ group.
Creating global or private summary report
If you wish to create a global or private summary report – for instance you might want to view the number of hits for a filter matching incorrect ssh connections – you should start by creating the appropriate search filter.
See section
Search Filters on page 8for information on how to create filters.
If you have your search filter ready and wish to use it to create a
report click Reports in the top menu and click Add new report.
Summary report - global
When you create global filers, summary reports for the global filter will be created automaticaly.
However, if you delete your contact or upgrade, you might have to create one manually.
Summary report - private
•Choose user that the report should belong to.
•Choose what private filter you like to base the report on.
•Click on “Save” and your report is created.
Note: When you have added your report it will take maximum 5 minutes until any graps is created.
Manage a global or private summary report
When you have created your report, it will show up every time you click Reports in the page top menu and then Global or Private summary reports flap.
Deleting
To delete a report
•Click on the

to the right of the report
•Click OK on the popup
Viewing
To view a report click on the

to the right of the report.
You will see a view like this:
The view is divided in two parts:
•A graph displaying number of filter matches
•A top 10 logging hosts table with number of matches per host.
You can “zoom” in on the grap by selecting what timeframe you want to look at by pressing the links under the graph image.