To use this feature, you must provide details of your e-mail server to the Messaging Component (msgagnt) so that reports can be e-mailed.
To add or modify an audit report:
Click Compliance Auditor on the home page of the console.
Click Audit Reports in the task pane.
Select one of the following:
To add a new report, click Add in the task pane.
To modify an existing report, select the required report, then click Modify in the task pane.
To copy an existing report, select the report, then click Copy in the task pane.
Configure the following fields:
Report Name: Specify a name for the report.
Disabled: To disable the report, select the Disabled check box. By default, disabled reports are not shown on the report list.
Run Report: To determine the time and frequency of each audit report, use the calendar to set the initial date, then set the frequency as required
Report Category: To limit the report to one category, select the category, or to include all categories, select All.
Report Target: (Conditional) To send the report to a user or all users in a group, click User Report in the Report Target section, then select the user or group from the drop-down list. Ensure that the users’ e-mail addresses are defined in the Account Details section in the Framework User Account definitions. You must define a keyword anchor in the Email To field.
Report Filter: Set the Report Filter to include the required event records:
Select one or more from New, Pending, Authorized, and Unauthorized.
Select the age of events you want to include in the report. Events older than the number of days you specify are included.
Select the escalation level of events you want to include in the report. Events at this escalation level and above are included.
Age(Days): Enter the Age of the report in days.
Escalation Level: Enter the Escalation Level of the report.
Email To: Specify the e-mail address of the user who is to receive the report:
If you want the report to be sent to a user who is not defined as a Framework user, specify the user’s e-mail address in the Email To field.
If you want the report to be sent to a user or group defined as the Report Target above, specify the following keyword anchor in the Email To field:
$User.ACT_EMAIL.value$
You can view the format in XML of the object tokens passed into the audit report by entering $<>$ in the Report Template field, deselecting the HTML check box, then clicking Test Report (ensure that you have defined a Report Target). To view just the user subtree, use $<User>$.
The tokens that appear are dependent upon what has been configured for the users. If the ACT_EMAIL.value token is not present for the target, an email address has not been defined for the user. For user configuration information, see Section 4.2.2, Modifying User.
Email From: Specify the email address of the user sending the report. You can also use a keyword anchor in the Email From field.
Receipt: Select if you want to enable notification when the receiver has read the message. The message is sent to the email address specified in the Email From field.
Email Subject: Specify a subject for the email message. This can be a text string, or you can use a keyword anchor in the Email Subject field. For example, if you wanted to display the target user’s name in the e-mail subject, you could enter the following in the Email Subject field.
Report for $User.ACT_FULL_NAME.value$
Report Template: Specify a Perl script in the Report Template field to control how the e-mail messages are formatted and what they contain. If you want the messages to be displayed in HTML, select the HTML check box.
For an example report template, see Sample Command Control Report Template.
Click Test Report to view the report that is sent to each e-mail target.
Use the arrow buttons with the mouse to page through the reports. In the test, the reports are not shown in HTML format. If there are errors in the Report Template, these are shown.
Click Back to return to the report configuration screen.
Click Finish.