Application Log Reports
The Application Reports provide different reports available for each application.
To view the reports use the following menu options:
- Home tab > Applications > Host Name: <host name of the machine associated with application>
- Reports tab > Detailed Application Reports section > View Report: <Application Name> Logs
The Detailed Application Reports section lists the Log Type, Report Description and View Report columns of the reports of each application log. View Report column contains links to open the various reports of the selected application log.
The supported application log types are:
Reports for MS IIS W3C Web Server Logs
Clicking the View Report link opens the Reports for MS IIS W3C Web Server Logs page.
The Overview section on top of the page displays the event count in the Event Count table. In the table event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table. Below the Event Count table, the page displays the event count for each host under Hosts sub section. In the Hosts table, the host names are listed under Name column and event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table against each host. The Report section at bottom of the page displays the various reports generated in the Report column of the table. The total events and top events of each report are listed in the Total Events and Top Events columns. There are delete icon links against each report to delete the report. The Report section header contains Edit Report List link to edit list of reports for the application. A report can be removed or added to the list from the link menu option.
EventLog Analyzer generates the following pre-defined reports for web server application logs:
- Hosts Report - the details covered in this report are: Client IP Address, Hits, Page Views, Bytes Sent, and Events
- Users Report - the details covered in this report are: Username, Hits, Page Views, Bytes Sent, and Events
- File Type Report - the details covered in this report are: File Type, Hits, Percentage, Bytes Sent, and Events
- Page URLs Report - the details covered in this report are: URI Stem, Hits, Page Views, Bytes Sent, and Events
- Browser Usage Report - the details covered in this report are: Browser, Hits, Percentage, and Events
- OS Usage Report - the details covered in this report are: OS, Hits, Percentage, and Events
- HTTP Error Status Code Report - the details covered in this report are: HTTP Status, Hits, Percentage, and Events
- Malicious URL Report - the details covered in this report are: URI Stem, Hits, Percentage, and Events
- Cross Site Scripting Attempts Report - the details covered in this report are: Client IP Address, User Name, and Events
- SQL Injection Attempts Report - the details covered in this report are: Client IP Address, User Name, and Events
Reports for MS IIS W3C FTP Server Logs
Clicking the View Report link opens the Reports for MS IIS W3C FTP Server Logs page.
The Overview section on top of the page displays the event count in the Event Count table. In the table event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table. Below the Event Count table, the page displays the event count for each host under Hosts sub section. In the Hosts table, the host names are listed under Name column and event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table against each host. The Report section at bottom of the page displays the various reports generated in the Report column of the table. The total events and top events of each report are listed in the Total Events and Top Events columns. There are delete icon links against each report to delete the report. The Report section header contains Edit Report List link to edit list of reports for the application. A report can be removed or added to the list from the link menu option.
EventLog Analyzer generates the following pre-defined reports for FTP server application logs:
- Hosts Report - the details covered in this report are: Client IP Address, Bytes Sent, Bytes Received, and Events
- Users Report - the details covered in this report are: Username, Bytes Sent, Bytes Received, and Events
- File Type Report - the details covered in this report are: File Type, File Transfers, Bytes Sent, Bytes Received, and Events
- Server Services Report - the details covered in this report are: Server Service, File Transfers, Bytes Sent, Bytes Received, and Events
- Server IPs Report - the details covered in this report are: Server IP Address, File Transfers, Bytes Sent, Bytes Received, and Events
- Source Port Report - the details covered in this report are: Server Port, File Transfers, Bytes Sent, Bytes Received, and Events
Reports for DHCP Windows Server Logs
Clicking the View Report link opens the Reports for DHCP Windows Server Logs page.
The Overview section on top of the page displays the event count in the Event Count table. In the table event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table. Below the Event Count table, the page displays the event count for each host under Hosts sub section. In the Hosts table, the host names are listed under Name column and event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table against each host. The Report section at bottom of the page displays the various reports generated in the Report column of the table. The total events and top events of each report are listed in the Total Events and Top Events columns. There are delete icon links against each report to delete the report. The Report section header contains Edit Report List link to edit list of reports for the application. A report can be removed or added to the list from the link menu option.
EventLog Analyzer generates the following pre-defined reports for DHCP windows server application logs:
- Lease Report - the details covered in this report are: Lease Report and Events
- BOOTP lease report - the details covered in this report are: Events
- DNS dynamic update report - the details covered in this report are: DNS update details and Events. The DNS update details are, DNS dynamic update request and DNS dynamic update successful
- Rogue server detection report - the details covered in this report are: Events
- IP-Event report - the details covered in this report are: IP Address and Events
- MAC-Event report - the details covered in this report are: MAC Address and Events
Reports for DHCP Linux Server Logs
Clicking the View Report link opens the Reports for DHCP Linux Server Logs page.
The Overview section on top of the page displays the event count in the Event Count table. In the table event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table. Below the Event Count table, the page displays the event count for each host under Hosts sub section. In the Hosts table, the host names are listed under Name column and event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table against each host. The Report section at bottom of the page displays the various reports generated in the Report column of the table. The total events and top events of each report are listed in the Total Events and Top Events columns. There are delete icon links against each report to delete the report. The Report section header contains Edit Report List link to edit list of reports for the application. A report can be removed or added to the list from the link menu option.
EventLog Analyzer generates the following pre-defined reports for DHCP Linux server application logs:
- Operations Report - the details covered in this report are: Operation and Events. The operations are: DHCPREQUEST, DHCPNAK, DHCPDISCOVER, DHCPOFFER, DHCPACK, DHCPINFORM, if IN, delete, Wrote, DHCPRELEASE, and Abandoning IP
- MAC-Event report - the details covered in this report are: MAC Address and Events
- Client Gateway Report - the details covered in this report are: Gateway and Events
- IP-Event report - the details covered in this report are: IP Address and Events
- Single Page Summary Report - the details covered in this report are: Logging device, Operation, IP Address, MAC Address, Gateway, and Events
Reports for MS SQL Server Logs
Reports for MS SQL Error Logs
Clicking the View Report link of the application type MSSQL Error logs,opens the Reports for MS SQL Database Server Logs page.
The Overview section on top of the page displays the event count in the Event Count table. In the table event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table. Below the Event Count table, the page displays the event count for each host under Hosts sub section. In the Hosts table, the host names are listed under Name column and event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table against each host. The Report section at bottom of the page displays the various reports generated in the Report column of the table. The total events and top events of each report are listed in the Total Events and Top Events columns. There are delete icon links against each report to delete the report. The Report section header contains Edit Report List link to edit list of reports for the application. A report can be removed or added to the list from the link menu option.
EventLog Analyzer generates the following pre-defined reports for MS SQL database server application logs:
- Successful Trusted Logins - the details covered in this report are: Username and Events
- Successful Non-Trusted Logins - the details covered in this report are: Username and Events
- Failed User Logins - the details covered in this report are: Username and Events
- Insufficient Resources Events - the details covered in this report are: Events
Report for MS SQL Audit Logs
| MS SQL Audit Logging is supported for MS SQL Enterprise and Datacenter Editions alone |
Click on View Reports link of MSSQL audit logs application type, to open its report page
The host table section of the Reports Page displays the name of the host (from which the MSSQL audit logs are being collected) and their corresponding audit log event counts classified based on the Critical, Error, Information and Warning severity. This table also displays the total audit log event counts.By clicking on the event count, you can drill down to the raw log level
The reports section displays various predefined reports generated along with their event counts. Here is the list of predefined reports generated by EventLog Analyzer for MSSQL Audit logs
- Server Startup
- Server Shutdown
- Create Table
- Alter Table
- Drop Table
- Create Login
- Drop Login
- Create User
- Alter User
- Drop User
- Successful Login
- Failure Login
- Alter login
- Login Password Change
Reports for Oracle Audit Logs
Clicking the View Report link opens the Reports for Oracle Database Server Logs page.
The Overview section on top of the page displays the event count in the Event Count table. In the table event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table. Below the Event Count table, the page displays the event count for each host under Hosts sub section. In the Hosts table, the host names are listed under Name column and event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table against each host. The Report section at bottom of the page displays the various reports generated in the Report column of the table. The total events and top events of each report are listed in the Total Events and Top Events columns. There are delete icon links against each report to delete the report. The Report section header contains Edit Report List link to edit list of reports for the application. A report can be removed or added to the list from the link menu option.
EventLog Analyzer generates the following pre-defined reports for Oracle database server application logs:
- Create Table - the details covered in this report are: SESSIONID, ENTRYID, USERID, USERHOST, TERMINAL, RETURNCODE, OBJ$CREATOR, OBJ$NAME, and Time
- Drop Table - the details covered in this report are: SESSIONID, ENTRYID, USERID, USERHOST, TERMINAL, RETURNCODE, OBJ$CREATOR, OBJ$NAME, and Time
- Alter Table - the details covered in this report are: SESSIONID, ENTRYID, USERID, USERHOST, TERMINAL, RETURNCODE, OBJ$CREATOR, OBJ$NAME, and Time
- Alter User - the details covered in this report are: SESSIONID, ENTRYID, USERID, USERHOST, TERMINAL, RETURNCODE, OBJ$NAME, and Time
- Alter System - the details covered in this report are: SESSIONID, ENTRYID, USERID, USERHOST, TERMINAL, RETURNCODE, and Time
- Create User - the details covered in this report are: SESSIONID, ENTRYID, USERID, USERHOST, TERMINAL, RETURNCODE, OBJ$NAME, and Time
- Drop User - the details covered in this report are: SESSIONID, ENTRYID, USERID, USERHOST, TERMINAL, RETURNCODE, OBJ$NAME, and Time
- Logon - the details covered in this report are: SESSIONID, ENTRYID, USERID, USERHOST, TERMINAL, RETURNCODE, and Time
- Logoff - the details covered in this report are: SESSIONID, ENTRYID, USERID, USERHOST, TERMINAL, RETURNCODE, and Time
- Connect - the details covered in this report are: DATABASE USER, PRIVILEGE, CLIENT USER, CLIENT TERMINAL, Status, and Time
- Shutdown - the details covered in this report are: DATABASE USER, PRIVILEGE, CLIENT USER, CLIENT TERMINAL, Status, and Time
- Startup - the details covered in this report are: DATABASE USER, PRIVILEGE, CLIENT USER, CLIENT TERMINAL, Status, and Time
- All Logs - This is created only as a custom report and is not available as a pre-built report
Reports for Print Server Logs
Clicking the View Report link opens the Reports for Print Server Logs page.
The Overview section on top of the page displays the event count in the Event Count table. In the table event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table. Below the Event Count table, the page displays the event count for each host under Hosts sub section. In the Hosts table, the host names are listed under Name column and event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table against each host. The Report section at bottom of the page displays the various reports generated in the Report column of the table. The total events and top events of each report are listed in the Total Events and Top Events columns. There are delete icon links against each report to delete the report. The Report section header contains Edit Report List link to edit list of reports for the application. A report can be removed or added to the list from the link menu option.
EventLog Analyzer generates the following pre-defined reports for Print server application logs:
- Print Server Hosts Overview - the details covered in this report are: Print Servers and Job Count
- Print Server Usage Overview - the details covered in this report are: Print Server, Printed Pages, and Jobs
- Printer Usage Overview - the details covered in this report are: Printer, Printed Pages, and Jobs
- Printer Usage based on User Name - the details covered in this report are: User Name, Printed Pages, and Jobs
- Print Job Reports - the details covered in this report are: Reports and Total Counts and the Reports are, Print Usage, Paused Document, Resumed Document, Deleted Documen, Moved Document, Timed Out Document, Corrupted Document, Priority Changed Document, and Insufficient Privilege Document
Reports for Apache Web Server Logs
Clicking the View Report link opens the Reports for Apache Web Server Logs page.
The Overview section on top of the page displays the event count in the Event Count table. In the table event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table. Below the Event Count table, the page displays the event count for each host under Hosts sub section. In the Hosts table, the host names are listed under Name column and event count is classified based on the severity Critical, Error, Warning, Information, and Total and displayed in the columns of the table against each host. The Report section at bottom of the page displays the various reports generated in the Report column of the table. The total events and top events of each report are listed in the Total Events and Top Events columns. There are delete icon links against each report to delete the report. The Report section header contains Edit Report List link to edit list of reports for the application. A report can be removed or added to the list from the link menu option.
EventLog Analyzer generates the following pre-defined reports for Apache web server application logs:
- Client Error Report
- Information Report
- Redirection Report
- Server Error Report
- Successful
The details covered in the above reports are: Address, Status Code, Referrers, User Agents, and Event
|
No comments:
Post a Comment