One Identity syslog-ng Store Box 5.3.0, Руководство пользователя

Страница: 31 / 45

5
Creating reports from log data
SSB can periodically create reports from the statistics of processed logs. To configure
reporting, first you have to create statistics from log data, and save it as a reporting
subchapter. You can then configure a report using the saved subchapter. You can include
multiple subchapters in a report. The necessary procedures are described in the
following chapters:
l
For more information on creating statistics from available log data, see Creating
custom statistics from log data on page 31 .
l
For more information on creating reports, see Configuring custom reports on
page 35 .
l
For instructions on browsing the generated reports, see Browsing reports on page 37 .
Creating custom statistics from log data
SSB can create statistics from the Facility , Priority , Program , Pid , Host , Tags , and
.classifier.class columns. Use Customize columns to add the required column,
if necessary.
NOTE:
The .classifier.class data is the class assigned to the message when pattern
database is used. For details, see "Classifying messages with pattern databases" in
the Administration Guide . The pattern databases provided by One Identity currently
use the following message classes by default: system , security , violation , or unknown .
You can display statistics on the web interface, export the related data as CSV, and also
save the statistics to include in a report.
Displaying log statistics
To display statistics about the log messages, click the icon in the appropriate header
of the table.
You can choose from Bar chart or Pie chart & List .
SSB 5.3.0 User Guide
Creating reports from log data
31