This topic describes how run and manage various types of reports. Information is included on working with ad hoc reports, archived reports, focused reports, delta reports, and scheduled reports. The topic on Running Reports includes detail on setting report parameters at run-time. Also included is information on how to import and export reports, and work with report groups.
Running Reports from a Grid View
Running an Event Context Report
Running Large or Complex Reports
Archiving and Scheduling Reports
Editing a Report Archiving Schedule
Defined reports are usually run on a schedule and their output archived automatically. But there are also many occasions when you need to run the basic report types directly.
See also Building Reports for an overview of all reporting tasks and tools, including how to develop new reports, queries, or trends using a provided template.
Tip: Best practices
By default, you can run up to four reports at the same time. The number of reports allowed to run simultaneously is a configurable parameter on the Manager in ARCSIGHT_HOME/config/server.properties through the setting
report.maxconcurrentinteractivereports = <number>
If the number is exceeded, each report will be placed in queue and will be run in the order they appear. Refer to the ESM Administrator’s Guide’s Configuration section, topic on Managing and Changing Properties File Settings.
If you are having problems running a large or complex report, refer to the topic Running Large or Complex Reports.
If you are having problems running PDF reports with Asian fonts, see the topic Generating Reports with Central European, Cyrillic, or Asian Fonts .
If a report does not show up as expected, try restarting the Console and running the report again.