Running and Managing Reports

This topic describes how run and manage various types of reports. Information is included on working with ad hoc reports, archived reports, focused reports, delta reports, and scheduled reports. The topic on Running Reports includes detail on setting report parameters at run-time. Also included is information on how to import and export reports, and work with report groups.

Defined reports are usually run on a schedule and their output archived automatically. But there are also many occasions when you need to run the basic report types directly.

See also Building Reports for an overview of all reporting tasks and tools, including how to develop new reports, queries, or trends using a provided template.

Tip: Best practices

  • By default, you can run up to four reports at the same time. The number of reports allowed to run simultaneously is a configurable parameter on the Manager in ARCSIGHT_HOME/config/server.properties through the setting

    report.maxconcurrentinteractivereports = <number>

    If the number is exceeded, each report will be placed in queue and will be run in the order they appear. Refer to the ESM Administrator’s Guide’s Configuration section, topic on Managing and Changing Properties File Settings.