Adding more columns to custom windows event log reports (Full Version)

All Forums >> [Networking & Security] >> GFI EventsManager



Message

ashleyu -> Adding more columns to custom windows event log reports (19.Mar.2009 3:10:25 PM)

We are trying to create several custom windows event logs reports and we are finding the columns in the output quite restrictive.

Is there some way of adding extra columns to the report output that is generated?

Thanks

Ashley



Michael Alexieff -> RE: Adding more columns to custom windows event log reports (20.Mar.2009 9:01:17 AM)

How are you creating the report and what are you wanting to return?



ashleyu -> RE: Adding more columns to custom windows event log reports (20.Mar.2009 10:27:59 AM)

Hi Michael,

We have created a report based on the generic windows event log report.

We are looking at all events in the security event log and filtering them to a particular user name to try and get all the actions done by a user.

The report is not so useful as it just gives us "Object Access" without saying what the object is.

Ideally we'd like to add columns in the report for Object Name and Image Filename.

I hope that all makes sense

Ashley



Michael Alexieff -> RE: Adding more columns to custom windows event log reports (20.Mar.2009 10:44:29 AM)

In the actual event can you see what the object is?



ashleyu -> RE: Adding more columns to custom windows event log reports (20.Mar.2009 11:04:46 AM)

Yes



RH_Kratos -> RE: Adding more columns to custom windows event log reports (12.May2009 3:47:55 PM)

Is there an answer to this problem? Are we able to add or remove columns in a Generic Windows report in ReportCenter?



rhodges -> RE: Adding more columns to custom windows event log reports (18.May2009 3:35:37 PM)

RH_Krntos...
According to teh chat that I just had with tech support, people have gotten close to adding columns but it is not supported.  It was hinted at that I should try using Crystal Reports to edit the .dfr files found in the reportpack directory.  I am off to find a copy of Crystal right now to see if it works. 



rhodges -> RE: Adding more columns to custom windows event log reports (19.May2009 2:32:54 PM)

As of this afternoon, I have tried several different methods of editing the files with Crystal Reports v10 and 2008 and nothing has worked.  I have also tried several different compression tools to see if that would help and it has not.  If anyone knows how to edit these .dfr files, it would be great to know how.



RH_Kratos -> RE: Adding more columns to custom windows event log reports (20.May2009 8:12:50 AM)

I didn't find anything useful through Google about editing DFR files either. I can't believe that there's not a way to customize reports. Why wouldn't GFI want customers to be able to write their own reports after we've captured all this data?!

I don't know anyone who has the time to wait on querying the database through events browser. With 35-million events in the database and the default view to show them all, it's very time consuming. [>:]



CSCraig -> RE: Adding more columns to custom windows event log reports (20.May2009 11:57:18 AM)

Just adding a plea to the forum gods...

Will someone from GFI please just clue us in on how to edit the report files?

I have looked through all of the XML files and everything leads back to the .dfr files as the report file.  I cannot figure out what is needed to edit the dfr files.



DrewE -> RE: Adding more columns to custom windows event log reports (21.May2009 3:50:20 PM)

As far as I am aware, there is no way an end user can edit these files. They are compiled by our development team and released with the software, again with no means to change them. I can submit this as a feature request for you.



RH_Kratos -> RE: Adding more columns to custom windows event log reports (22.May2009 7:55:22 AM)

Yes, please. The feature would be long overdue.



imatone -> RE: Adding more columns to custom windows event log reports (24.Jun.2009 6:36:33 AM)

quote:

to edit the .dfr files found in the reportpack directory


Any update? Shouldn't be that difficult to add a column or two. TIA



DrewE -> RE: Adding more columns to custom windows event log reports (24.Jun.2009 11:29:42 AM)

There are currently still no plans to change this that I am aware of. It is a known limitation of the report pack.



RH_Kratos -> RE: Adding more columns to custom windows event log reports (24.Jun.2009 1:43:04 PM)

This is a significant limitation of the usefulness of Report Pack. Can you elaborate on why it would not be a priority to add this?

Thanks,

RH



Page: [1]