11.2 Viewing the Reports

The reports are loaded and displayed in the Reports panel on the left of the Sentinel Web interface. Click More > Show all reports to view all reports or click More > Only show scheduled reports to view only the scheduled reports.

The report results for each users vary depending on the data security settings configured for the role of that user.

All the report results are ordered by the creation time. If there is more than one report, the show more link is displayed that displays other report results.

In the Reports panel, the Favorites and Other sections show the number of unread reports with a blue dot next to them.

A blue dot next to the report result indicates that the report result is unread. For more information, see Marking Report Results as Read or Unread.

11.2.1 Viewing the Report Results in PDF

Only Jasper reports can be viewed in PDF.

  1. Log in to the Sentinel Web interface.

  2. In the Reports panel, select the report definition that you want to run, then click Run.

  3. Click the report definition to view the report results in the Reports panel. An unread report result appears with a blue dot next to it.

  4. Select a report result.

  5. To view the report in PDF format, click the View Report PDF icon.

    You can view only Jasper reports, not search reports, in PDF.

  6. (Optional) At the bottom left corner of the page, view the report parameter values used to run the report.

    When a report definition is expanded, some report definitions display a Sample Report link, if a report definition contains a sample report.

  7. Click Sample Report to display a View link.

  8. Click View to find out how the completed report looks with a set of sample data.

    Report results are organized from the newest to the oldest.

11.2.2 Drilling Down into Report Results

The drill-down viewing option provides the ability to launch a search with the same query and time frame that was used to generate the report. This option allows users to view details of the event used to generate the report.

The drill-down feature is available only on reports that run against the file-based event store, or multiple event stores for a distributed query. It is not available on Sentinel configuration reports that run against the database.

In addition, the drill-down feature is available only on reports that specify the Lucene query in the main .jrxml file of the report. This is true for most reports that are written by NetIQ, with the exception of a few reports that rely on multiple subreports, such as the NetIQ Top Ten reports.

  1. Log in to the Sentinel Web interface.

  2. In the Reports panel, select the report you want to run, then click Run.

  3. Click the report definition to view the report results in the Reports panel. An unread report result appears with a blue dot next to it.

  4. Select a report result, then click the drill-down icon to launch the drill-down query.

11.2.3 Viewing Report Parameters

The Reports panel on the left side of the page displays a status pane at the bottom left corner of the page. The status pane displays the parameter information associated with the selected report. It also displays the error messages, if the report execution resulted in an error.

  1. Log in to the Sentinel Web interface.

  2. In the Reports panel, click a report definition to expand it.

  3. Select the report to view the parameters associated with the selected report.

    The report parameters are displayed in the status pane.