BMC Defender Server reporting

BMC Defender Server includes a comprehensive reporting facility, that automatically creates reports that summarize message data. Various types of reports exist, ranging from ad hoc reporting by the Query function, Audit reports suitable for review by auditors and analysts, and PDF reports.

Reports operate differently from correlation items as follows:

  • Reports are generally launched as background processes once each day at midnight (or on demand.)
  • The reports list the state of the message data and system at the time the report was generated. Although similar to the correlation items discussed previously, reports are different; they are not real-time and instantaneous.
  • The reports refer to the statistics that existed at the specific time the report was generated.

Report screens provide Job Control, that is the reports run in the background, and once a report gets launched, the operator can leave the reporting screen and check back at a later time to see the results. The operator can terminate a running report and can obtain status on the report progress.

Note

Reports generated by the BMC Defender Server system may contain confidential information. Users and operators should practice good security when handling reports of all types and should be aware that the organization may tightly control the report content. Hence, actions such as downloading reports to your desktop, or e-mailing reports to yourself, may be prohibited by the security policies of your organization.

Additional notes

  • BMC Defender Server generates reports in PDF format, and these reports are downloadable via the  BMC Defender Server web interface.
  • Reports are normally generated each night at midnight. You can also generate reports on demand via the Run Report option at the top of the screen, including individual generation of reports through the Edit screen of each report.
  • BMC Defender Server supports loading of report data ODBC compliant databases. You create a System DSN and configure username, password, and database within the BMC Defender Server System > ODBC screen.
  • The Pivot reporting tool is used to parse regular data fields (such as that commonly found in firewall data, HTTP server logs, and many other messages).
  • The Pivot report tool allows you to quickly see the relationship between message counts for the field values within a message.
  • The Pivot report generation function is documented within a separate manual, which is accessible from the More > User Manuals link of the BMC Defender Server.

Related topics

BMC-Defender-Audit-Report-facility

Pivot-reports

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*