Purpose:
To show the difference between two sets of parameters of an existing report within a single comparative report. You can also set up a delta report to run and archive on a schedule. See also Archiving and Scheduling Reports and Scheduling Report Tasks for more information.
Requirements:
For more information about creating reports with these characteristics, see the Binding Data to the Report.
Where: Navigator > Resources > Reports
Right-click a report and select Run, then Delta Report.
Select the parameters for the first report, select a report format from the drop-down menu, and click OK.
Select the parameters for the second report and click OK.
Select Save Output if you want to save a copy of the report to disk.
If this option is selected, additional archive parameters are displayed. You can override any of these defaults also. You can select a group in which to archive the report, provide a report name, and specify an expiration time at which to discard the report from the archive. By default, the report is saved in the archive for 6 months from the time it was run.
Tip: You can use Velocity template references for fields that accept text, such as Archive Report Name and Archive Report Expiration Time. See Velocity References for Reports for details.
The Report Viewer appears and displays the delta report. The report shows the difference between two sets of parameters used on a single report. The report also shows the data for each of the parameters.
When a delta report is run or archived, an internal event is sent to the ArcSight Manager. This event contains the following data fields and values:
Delta Report Event-data Field |
Description |
---|---|
Event Name |
Delta Report Generated (Report: |