Creating custom windows event reports using rules as a filter

	Forums Register Login My Profile Inbox Address Book My Subscription My Forums Member List Search FAQ Ticket List Log Out

Creating custom windows event reports using rules as a filter

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> [Networking & Security] >> GFI EventsManager >> Creating custom windows event reports using rules as a filter

Page: [1]

Message

<< Older Topic Newer Topic >>

Creating custom windows event reports using rules as a ... - 19.Mar.2009 3:09:04 PM

ashleyu

Posts: 5
Score: 0
Joined: 19.Mar.2009
Status: offline

We are trying to create some custom reports based upon windows event logs.

If we created custom rules based upon syslog events it's great because we can filter based upon rules.

However when we try and create a custom reports based upon a windows event logs we don't get the option to filter based on rules.

Can someone help?

Thanks

Ashley

Post #: 1

RE: Creating custom windows event reports using rules a... - 2.Apr.2009 10:39:15 AM

LeoSanchez

Posts: 116
Score: 0
Joined: 28.Apr.2008
Status: offline

Hello ashleyu,

As you have stated you cannot customize the event log related reports by 'Rule'. However, as a workaround you will be able to filter out such events from the EventsBrowser feature in GFI EventsManager. This browser will allow you to setup a query for events matching your particular rule. You can then export these results to a csv file.

I will submit the report based on rule as a feature request for consideration by our developers.

_____________________________

Regards,

Leo - Technical Support
GFI Software - www.gfi.com

(in reply to ashleyu)

Post #: 2

RE: Creating custom windows event reports using rules a... - 2.Apr.2009 10:42:42 AM

ashleyu

Posts: 5
Score: 0
Joined: 19.Mar.2009
Status: offline

Thanks

Ashley

(in reply to LeoSanchez)

Post #: 3

RE: Creating custom windows event reports using rules a... - 13.Apr.2009 3:40:22 PM

jeff4379

Posts: 1
Score: 0
Joined: 13.Apr.2009
Status: offline

I'd also like to voice my interest in a better report-building feature. I like the granularity of the rules in the event viewer, I was very suprised that the report pack did not have a similar filter. At this point I find it almost eaiser to write my own SQL queries, but I do like the email scheduling that is in the Report pack

(in reply to ashleyu)

Post #: 4