Understanding the Reporting Workflow
Building reports is a multi-step process that involves use of a few different data gathering and reporting tools. ArcSight can gather report data using standard queries or trends.
Tip: Reports can be relatively simple (you can create a report with the Report Wizard based on the results of a single query) or complex (you can create a report based on the results of layers of queries and trends that feed data results up the chain as the basis for new queries). See End-to-End Reporting Examples for examples of both basic and complex reports.
Following is a quick overview of the reporting workflow tasks and tools, along with a reminder about dependencies among reporting resources.
For a more in-depth description of how these elements build on each other to create various views of the data, see also Query-Trend Relationships in Reporting.
