Calin Ghibu
Posts: 1194
Score: 0
Joined: 15.Dec.2002
Status: offline
|
Hi, The report you are mentioning is groupped by the security category level (critical, high, medium, etc). By default, it only lists the critical messages, as the name suggests. If you created a custom report, to configure sorting etc, and also include other security category levels, like high and medium, along with the critical ones, or if you have removed the security category level = critical condition, the report will display events from more security categories levels and not just the critical ones. The report being groupped by the security category level, the sorting will take place ONLY within the group itself, and not overall in the report. That is because groupping takes precedence over sorting. Hence you may have the following: Classification: Critical Information Classification: High Notice Error Information Etc. Best regards, Calin
|