Open topic with navigation

Customize Selected Case Report

This topic explains how to customize the basic case report by using the customized query (Customize Selected Case Query). For best results, use the Simple Table Portrait for your customized report. Use Simple Table Landscape if you want a wider format. If you use formats other than Table, your report readers might have usability issues.

To customize Selected Case Report:

  1. Copy Reports/All Reports/ArcSight System/Core/Selected Case Report into a custom report group of your choice and rename it, for example:

    Reports/Shared/All Reports/Public/CW3 Selected Case Report

  2. Right-click the copied report and select Edit Report.

  3. Go to the Data tab:

    1. For the Data Source field, browse to the copied query (CW3 Selected Case Query in our example) and select it as the data source for the report.

      The added fields from the modified query appear in the Available Columns table. Scroll horizontally to view all available fields so you can confirm the additions.

    2. On Available Columns, locate the fields you added to the report query. Check the boxes corresponding to the added columns.

Next, go to Add a Server Property for the New Report URI to complete your customized case report.