Raw message sample section

This final section includes a sample of messages from the data source, useful for verifying the message types being processed. (The data is intended only to assist identifying the message source, and is generally not useful for forensics.) Up to 500 messages are listed in this section, starting with the latest messages logged for the selected message source. 

Note

These raw messages do not necessarily match the Additional Match Expression value configured in the report generator for the report.

This report section binds the sample of the messages associated with the operator selected data source to the report, to assist with analyzing the purpose and intent of the report.

It is possible to change the number of messages listed in this section using an input available on the Report Categories screen. For instance, if the list of messages is relatively small, then all the messages in the message source might be listed here. (In this way, this is similar to the Report Listing functions of the Query PDF report.)

Note

The Additional Match Expression is not applied to these messages. Hence the messages in this section should be taken as just a representative sample of all messages, necessary to clarify the other metrics contained in the report.

Disabling this section can substantially reduce the size of the report. 

Related topics

PDF-report-metrics

PDF-reports

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*