Create and view custom reports

A custom report is a report that you create from the available dimensions and metrics according to your operational requirements. A report helps you to organize your data graphically and helps in visualization and analysis. You choose the data source, dimensions, metrics, and decide the type of visualization for creating and displaying the reports.

Create a custom report

  1. From the Security tab, click Reports > Create Report.

    Report link

  2. On the Create Report page, use the following fields to create a report:

    • DATA SOURCE. Select the data source for which you want to create a report. Click View events to go to the self-service search page for the selected data source.

    • METRICS. Data used for quantitative measurements. The metric values change based on the selected data source. The metric data is displayed on the y-axis of the report. Use the search field to search for the available metrics.

    • DIMENSIONS. Data attributes associated with the selected data source. The dimension values change based on the selected data source. The dimension values are displayed on the x-axis of the report. Use the search field to search for the available dimensions.

    • FILTERS. In Data fields, click the plus (+) icon to add the required dimensions. Select the required facet data for the dimensions. For example, add the dimension Reputation and then select facet data such Dangerous Access, Malicious Access to create a report based on the selection.

    • VISUALIZATION. Select the visualization for displaying the report. Currently, four visualization types are available:

      • Bar chart: Presents data with vertical rectangular bars with height proportional to the values. Used for comparing events.

      • Event chart: Presents data with dots that represent the values. Used for determining correlation between events.

      • Line chart: Presents data with dots connected by straight line segments. Used to visualized data trend over time period.

      • Table: Presents data in rows and columns.

      Select the appropriate visualization type and accordingly add the dimensions for the x-axis or column (for table) and the metrics for the y-axis that you want to view in your report.

    • NAME OF THE REPORT. Specify a title for your report.

    • TIME PERIOD. Select a time period of the events for which you want to create a report.

  3. Preview the report and click Save.

View and modify a report

After you have created and saved a report, you can view the report on the Reports page. You can also modify or delete a saved report.

To view and modify a report:

  1. On the Security page, click Reports.

  2. The saved reports are displayed along with the following information:

    • REPORT NAME. The name of the report that you have specified.

    • TYPE. The visualization types such as bar chart, event chart, line chart, or table.

    • CREATOR. An administrator who created the report.

    • DATE. The time and date when the report was created.

    Saved reports

  3. Click the arrow (>) icon placed before a report name to expand and preview a report.

  4. Click a report name in the list for a detailed view.

  5. Click Edit to modify the report and then click Update to save the report.

  6. Click Delete if you want to delete the report.

Create and view custom reports