Getting started: Default reports

Introduction

After installing the GFI EventsManager ReportPack, a number of specialized pre-configured reports can immediately be generated on the data stored in the database backend of GFI EventsManager. These default reports are organized into the following categories:

 

•	Account Usage Reports: Use the reports in this category to identify user logon issues. The event details shown in these reports include successful/failed user logons and locked user accounts.

•	Account Management Reports: Use the reports in this category to generate a graphical overview of important events that took place across your entire network. The event details shown in these reports include changes in user and computer accounts as well as changes in security group policies.

•	Policy Changes Reports: Use the reports in this category to identify policy changes effected on your network.

•	Object Access Reports: Use the reports in this category to identify object access issues. The event details shown in these reports include successful/failed object access and objects which have been deleted.

•

Application Management Reports: Use the reports in this category to identify faulty applications and application installation and removal issues. The event details shown in these reports include applications which have been installed or removed as well as applications which are crashing and hanging.

•	Print Server Reports: Use the reports in this category to display details related to printing events. Details provided in these reports include documents that have been printed, the users that triggered the printing event and the date/time when the printing operation took place.

•	Windows Event Log System Reports: Use the reports in this category to identify audit failures and important Windows event log issues. Details provided in these reports include the starting and stopping of event log services, clear log operations as well as errors generated during event logging.

•

Events Trend Reports: Use the reports in this category to display statistical information related to event generation. Charts provided enumerate the 10 computers and users with most events. Other reports provide event counts on a network-wide basis as well as on a computer by computer basis. Reports in this category can be generated for each main time period – by hour, day, week or month.

•	All critical reports: Use the reports in this category to display information related to critical Windows events, Syslog, W3C, Custom Events, SNMP Traps and SQL Server Audit events. The charts provided enumerate the 10 most critical events.

•	Miscellaneous, Customizable reports: Use the reports in this category to generate reports that offer broad customization. These can be used to generate reports based on any Windows event log, using filtering conditions and grouping modes which are not covered by the other default reports.

GFI EventsManager default reports are accessed by clicking on the Default Reports navigation button provided in the management.