Running a Delta Report

Purpose:

To show the difference between two sets of parameters of an existing report within a single comparative report. You can also set up a delta report to run and archive on a schedule. See also Archiving and Scheduling Reports and Scheduling Report Tasks for more information.

Requirements:

• Delta reports are available only for reports with a bar, 3D bar, or inverted bar chart.
• The report must contain one chart only (no tables).
• The X and Y axis must have at least one column each, and no Z-axis.
• The chart must not have any summary function or top N filter applied.

For more information about creating reports with these characteristics, see the Binding Data to the Report.

Where: Navigator > Resources > Reports

1. Right-click a report and select Run, then Delta Report.

2. Select the parameters for the first report, select a report format from the drop-down menu, and click OK.

3. Select the parameters for the second report and click OK.

4. Select Save Output if you want to save a copy of the report to disk.

   If this option is selected, additional archive parameters are displayed. You can override any of these defaults also. You can select a group in which to archive the report, provide a report name, and specify an expiration time at which to discard the report from the archive. By default, the report is saved in the archive for 6 months from the time it was run.

   Tip: You can use Velocity template references for fields that accept text, such as Archive Report Name and Archive Report Expiration Time. See Velocity References for Reports for details.

The Report Viewer appears and displays the delta report. The report shows the difference between two sets of parameters used on a single report. The report also shows the data for each of the parameters.

When a delta report is run or archived, an internal event is sent to the ArcSight Manager. This event contains the following data fields and values: