Popular Tags

  • Report on total security event collected for a month

    How can I generate a weekly or monthly report on the total number of security events collected from all connectors in ArcSight ESM?

  • Rule notification via email with attached report

    Is there a possibility when an alert is triggered, in addition to sending an email with the fields, also sending an attached report? It would be like running a query as soon as the alert is triggered and the query result goes to the attached alert itself…

  • fusion/recon reporting with dynamic time range

    Hello all! I would like to ask how can i specify dynamic time range for my scheduled recon reports. If i want to schedule daily reports on $yesterday's events (00:00:00-23:59:59) how am i supposed to configure it? Each time it runs on schedule, it…

  • ESM hostname through velocity variable in report's name

    Dear all, I couldn't find a way to get ESM's hostname through a variable inside a report name. And neither found this documented in anywhere. Is any of you that successfully did this?

  • Can't access Reports page. I get a session expired message. How can I fix this?

    Everything else works fine. I can access the Summary, Analyze, Dashboards, Configuration and System Admin pages just fine. All my other colleagues can access the Reports page, only I can't. I tried changing browser, deleting and recreating my user profile…

  • Calculate percentage in report

    Is there a way to calculate percentage in report from 2 different queries? ex: ( Query1) / (Query2)]*100% if it is not possible on ESM can we do such thing on Logger or investigate?

  • Changing the mail report that sent from ESM console.

    Hello, How do I change the text of the mail body that is sent with attached report from ESM console? Thanks in advance Ran

  • Logger report not working after upgrade to 7.0.0.8280

    After the latest upgrade to 7.0.0.8280 the reporting is working very odd. The query is ok. but the report keeps running and never ends. Have anyone tried the new version? /Per Bejder

  • How compare IP with multiple subnets

    Hello! I need a help. I need to compare IP with several subnets and put a comparison result in a separate field of the report. For example: there is IP 1.1.1.1 it should be compared with 1.1.1.0/24 - servers, 2.2.2.0/24 - workstations, 3.3.3.0 / 24-network…

  • Logger Reports : Turn off Securedata for reports

    Hi, We are currently using Logger 6.6 and would like to turn off securedata so our pdf / excel reports don't show the red padlock. Configure > SecureData Configuration doesn't allow us to save without a securedata server which we do not have. Thanks,…

  • How do you troubleshoot ArcSight report template scripts?

    I am attempting to add some scripts to an ArcSight template in order to show/hide elements depending on whether there is content inside them. I am also hoping to add some basic logic to do things like SUM all the cells in a particular column and then…

  • Logger 6.4 report schedule

    When report is schedule for send output via mail, this error occurs: Report server failed to get the authentication mode for the given organization because no such organization exists Did anyone find the same issue? G.

  • Logger 6.4 report schedule

    When report is schedule for send output via mail, this error occurs: Report server failed to get the authentication mode for the given organization because no such organization exists Did anyone find the same issue? G.

  • EPS Calculation

    Hi All, I was trying to create a query for EPS calculation in ESM. the default query in by HP suggests we should be using the Sum of Aggregated Events but I do not have aggregation enabled on ArcSight rather some of the devices like Firewalls itself are…

  • Report Window Pivoting

    I created this as a result from two experiences. One was when I needed to have more control of a report at runtime. The second was when I was reviewing a set of nearly identical reports that existed in various areas of the folder structure. This solution…
    • Report_Pivoting.arb.zip

  • run Report on old Data

    I have a requirement to generate a Report on old data, for a whole month. What is the best approach for this? taking into consideration that I didn't have queries and trends created by that time.

  • manual report generating twice

    Hello, For specific reports in ESM, it always runs twice. All i am doing is right click on report --> run --> report --> ok. As shown below, I only run ONE report of each type but they get generated twice. Anyone experienced something similar? Thank …

  • "How do I export?" and Trend based report doesn't contain all data for first column

    I've spent some time trying to figure out why a report wasn't working. Since ArcSight doesn't appear to allow two levels of grouping in a report, I am exporting the report and then pulling it in to Crystal Reports to get what i need. oddly, I was getting…

  • Is it possible to export/report on more than 10,000 rows?

    I need to be able to export or else report via CSV far in access of 10,000 rows. (More like 25 million) When I create a report to pull the data out of a trend as csv, it only exports 10,000 rows. It's not an excel thing as I'm saving to the hard drive…

  • [Logger 6.1] Logger query for report - Alternative to mix LIKE and IN and Parameters

    Folks, I've been around for a while, trying to match some user given parameters with some CEF events but they don't exactly match, since the CEF event have just a part of the user parameter. And the things got way more complicated when the user demanded…

  • Report Header with Query Data

    Hello Everybody, Is there any smart idea of placing query data in report header ? My experience is query data can only be presented in Tables and Tables can not be stored in report header. I have to mark report classification level in both header and…

  • Running a Logger Report via API for CSV results on demand via Python

    Recently a customer asked how to get CSV results from a Logger report to an external system. This can be done using Logger GUI to email report results on a scheduled basis or on demand, but this customer wanted to get the CSV results onto a fileshare…
    • RunReport.py.zip

  • Custom Parameters in Reports - match all values by default

    Hello, I am trying to create a report with Custom Parameters so that when I choose to run the report, I have the following options: 1. By default, if I don't fill in the Custom Parameters fields with my own value, I want the report to match all possible…

  • Report event count is actually sum of aggregated count

    I don't remember this being an issue on old 5.x versions I've used but I'm on Express 4.0 running CORRE now. If I do a Count(Name) COUNT in a query/report the output is actually the sum of the aggregated event counts from each event. I've verified by…

  • Multiple queries or datasource in logger reports

    Good Morning, I'm trying to create a report in Logger with different kind of information, so for that i need different queries. However, i can't see how to associate more than one query to the report. Is it possible to do that in Logger or i need to create…

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.