Limited supportBMC provides limited support for this version of the product. As a result, BMC no longer accepts comments in this space. If you encounter problems with the product version or the space, contact BMC Support.BMC recommends upgrading to the latest version of the product. To see documentation for that version, see BMC AMI Command Center for Security 6.2.

BMC Defender Server reporting

BMC Defender Server includes a comprehensive reporting facility, that automatically creates reports that summarize message data. Various types of reports exist, ranging from ad hoc reporting by the query function, audit reports suitable for review by auditors and analysts, and PDF reports.

Related topics

BMC-Defender-Audit-Report-facility

Pivot-reports

Reports operate differently from correlation items as follows:

  • Reports are generally launched as background processes once each day at midnight (or on-demand).
  • Reports list the state of the message data and system at the time the report was generated. Although similar to correlation items, reports are different; they are not real-time and instantaneous.
  • Reports refer to the statistics that existed at the specific time the report was generated.

Report screens provide job control, that is, the reports run in the background, and once a report is launched, you can leave the reporting screen and check back at a later time to see the results. You can obtain status on the report progress and terminate a running report.

Important

Generated reports might contain confidential information. Practice good security when handling reports of all types and be aware that the organization may tightly control the report content. Actions such as downloading reports to your desktop or emailing reports to yourself might be prohibited by the security policies of your organization.

Additional notes

  • BMC Defender Server generates reports in PDF format, and these reports are downloadable through the BMC Defender Server web interface.
  • Reports are normally generated each night at midnight. You can also generate reports on-demand with the Run Report option at the top of the tab, including individual generation of reports through the Edit screen of each report.
  • BMC Defender Server supports loading of report data ODBC compliant databases. You create a System DSN and configure the user name, password, and database within the BMC Defender Server System > ODBC tab.
  • The Pivot reporting tool is used to parse regular data fields (such as that commonly found in firewall data, HTTP server logs, and many other messages).
  • The Pivot report tool allows you to quickly see the relationship between message counts for the field values within a message.
  • The Pivot report generation function is documented within a separate manual, which is accessible from the More > User Manuals link of the BMC Defender Server.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*