Report Options Dialog Box
Use this dialog box to define report parameters and run a report. Report parameters help you specify which data from the DeviceLock log files you want to use in a report.
Period from:……To:
Specifies the start and end date and time of the report period for which data is displayed. The date format is MM/DD/YYYY where MM specifies the month, DD the day, YYYY the year. The time format is hh:mm:ss {AP}M, where hh the hour, mm the minute, ss the second, and {AP}M the AM or PM designation.
In the Period from: and To: boxes, type or select the date and time of the report period.
The default start and end time of the report period is the time at which the Report Options dialog box opens. The default end date of the report period is the current date. The default start date of the report period is the same day in an earlier month. For example, if the current date is March 5, 2009, the default end date of the report period is 3/5/2009 while the default start date is 2/5/2009.
Computer(s):
Specifies computers for the report. The Computer(s) box is not displayed in the Report Options dialog box for the Top active computers report types.
The Computer(s) box is empty by default. This means that the report will display data for all computers in the DeviceLock Enterprise Server database.
To specify computers for the report, do any of the following:
- OR -
Version(s):
Specifies DeviceLock Service versions for the report. Appears only for the DeviceLock Service versions and DeviceLock Service versions by computers report types.
The Version(s) box is empty by default. This means that the report will display data for computers with all versions of DeviceLock Service in the DeviceLock Enterprise Server database.
To specify versions for the report, in the Version(s) box, type version numbers using wildcards, such as asterisks (*) and question marks (?). For example, type 6.4.? to specify version 6.4.x.
An asterisk (*) replaces an unlimited number of characters. The question mark (?) replaces a single character. You can use these wildcards in any position and in any quantity.
Multiple versions must be separated by a comma (,) or semicolon (;).
Users
Specifies users for the report. The User(s) box is not displayed in the Report Options dialog box for the Top active computers and Top active users report types.
The User(s) box is empty by default. This means that the report will display data for all users in the DeviceLock Enterprise Server database.
To specify users for the report, do one of the following:
- OR -
NOTE: You cannot specify user groups for the report.
Threshold
Specifies the time interval, in seconds, between logged events. This interval is used for event consolidation. It appears for all report types in the Audit Log report category except the Top inserted USB & FireWire devices report type.
Because a single user action often triggers multiple events, DeviceLock uses event consolidation when collecting events from the audit log for reporting purposes. DeviceLock compares the time element of an event with the time of subsequent events. When this time delta is less than or equal to the Threshold value, multiple events of the same type (either Allowed or Denied) are combined into a single summary event if all of the following conditions are true:
Report Devices
Select this option if you want to display data for all device types. If you do not select this option, information on all device-related activities will be excluded from the report. Appears only for Allowed & Denied access requests per channel, Allowed vs. Denied access requests, and Copied files per channel report types.
Report Protocols
Select this option if you want to display data for all protocols. If you do not select this option, information on all protocol-related activities will be excluded from the report. Appears only for Allowed & Denied access requests per channel, Allowed vs. Denied access requests, and Copied files per channel report types.
Send report via email
Select this option if you want to automatically send the generated report to individual users through e-mail. If you select this option, in the Recipients box, type the e-mail addresses of the recipients separated by commas, semicolons, or spaces. Use the following format: user@mailserver
Access type(s)
Specifies the types of events that you want to include in or exclude from the report. Appears only for the Read & Write access requests per device type report type in the Audit Log report category.
If you select the Allowed check box, the Success Audit events (that is, events that record successful access attempts) will be retrieved for the report. If you select the Denied check box, the Failure Audit events (that is, events that record failed access attempts) will be retrieved for the report. You can use either or both of these options to specify the types of events.
Device type(s)
Specifies the device types for the report. Appears only for the Top active computers, Top active users, and Top copied files report types. If you select this option, select the appropriate check boxes next to the device types you want to specify for the report.
Protocol(s)
Specifies the protocols for the report. Appears only for the Top active computers, Top active users, and Top copied files report types. If you select this option, select the appropriate check boxes next to the protocols you want to specify for the report.
NOTE: If you leave both options - Device type(s) and Protocol(s) unselected, the report will display data for all device types and protocols. If you select either of these options and then specify device type(s) or protocols, the report will display data only for the specified device type(s) or protocols.
Top computers
Specifies the number of the most frequently used computers. Appears only for the Top active computers report type. The default value is 10. To change the default value, type or select the appropriate number of computers in the Top computers box.
Top Printers
Specifies the number of the most frequently used printers. Appears only for the Top used Printers report type. The default value is 10. To change the default value, type or select the appropriate number of printers in the Top Printers box.
Top users
Specifies the number of the most active users. Appears only for the Top active users report type. The default value is 10. To change the default value, type or select the appropriate number of users in the Top users box.
Top USB and FireWire devices
Specifies the number of the most frequently inserted USB and FireWire devices. Appears only for the Top inserted USB & FireWire devices report type. The default value is 10. To change the default value, type or select the appropriate number of devices in the Top USB and FireWire devices box.
Top USB devices
Specifies the number of the most frequently used USB devices. Appears only for the Top used USB devices report type. The default value is 10. To change the default value, type or select the appropriate number of devices in the Top USB devices box.
File name
Specifies files for the report. Appears only for the Top active users, Top active computers, and Copied files per channel report types in the Shadow Log report category.
The File name box is empty by default. This means that the report will display data for all files in the DeviceLock Enterprise Server database.
To specify files for the report, in the File name box, type file names using wildcards, such as asterisks (*) and question marks (?). For example, type *.txt to specify all files that have the .txt extension. To continue the example, if you want to specify all files whose names begin with any characters that contain the string "price" and have any extension, type *price*.*
An asterisk (*) replaces an unlimited number of characters. The question mark (?) replaces a single character. You can use these wildcards in any position and in any quantity.
Multiple file names must be separated by a comma (,) or semicolon (;).