Creating reports

To create a report:

  1. Click on a Report Type item, such as User reports in percentages.
  2. Either right-click on the item, or right-click on an empty space in the right pane.
  3. Select New > Report…

Depending on the type of the report you choose, a set of properties are displayed. The report is created when you click OK.

Note: Creating a report is different from generating a report. Creating a report will save the report settings, such as report period, events to include, etc., but will not save the actual data that is retrieved and included in the report. Once you generate the report, the latest data is retrieved from the database, and the report is displayed in the right pane. You must generate reports each time you launch GFI LANguard S.E.L.M. Reporter, since report data changes each time GFI LANguard S.E.L.M. scans your computers.

Modifying report properties

Once you create a report, you can change its properties by performing the following steps:

  1. Right-click on the Report item. This will display the context-menu for the report.
  2. Click on 'Properties…'.

You will be able to modify the current report properties similarly as when you created the report.

User reports in percentages

Reports created under User reports in percentages display the total number of events per user, irrelevant of the computers on which the events were generated. The users are ranked with the user who generated most events at the top.

The General Properties for User reports in percentages Reports are:

User reports by percentages General Properties

The General property page controls the nature of the report. You can choose between one of the following reports:

  1. Failed logon due to a bad username/password. Only events with Event ID 529 are included in this report. These events are generated due to users typing in a bad password.
  2. Failed logon events. This report will include all events generated due to a failed logon. It includes Event IDs 529, 530, 531, 532, 533, 534, 535, 536, 537 and 539.
  3. Successful logon events. This report will include all events generated due to a successful login. It includes Event IDs 528 and 540.
  4. Custom. This option allows you to select which particular events and logon types you wish to include in your report. Click on 'Settings…' and you will be able to choose between:
    1. All events or particular events.
    2. All Logon Types, or particular Logon Types, which can be a combination of Interactive, Network, Service, Batch, Proxy or Unlock Workstation. For the preset reports (1-3 above), all Logon Types will be included.

The report will be automatically assigned a name depending on the various settings you choose. However you can override this name by clicking on 'Override automatic naming of this report' and editing the report name manually.

Specifying the report period

Besides General settings, you can also specify the report period in the Period settings. Only those events generated in this period will be included in the report. When you create a new report, the current month will be selected by default:

Specifying the report period

You can choose between these different periods:

  1. Relative period. Choose either 'Today' or 'Yesterday'. Depending on when the report is generated, the period will always be relative to the current system date. Therefore, a 'Today' report will always include those events generated on the day the report is generated. Similarly, a 'Yesterday' report will always include those events generated on the day before.
  2. By Day. Choose a particular day for which events should be reported.
  3. By Month. Choose a particular month for which events should be reported.
  4. By Date Range. Choose a particular start day and a particular end day to specify the period for which events should be included.

Options 2-4 are absolute, and provided that they specify past dates the report should always produce the same output. An exception would be when there are some computers on your network with incorrect system times.

Note that the Period settings are also common to the other report types :

  • First/Last daily user event reports,
  • Computer event reports, and
  • Computer event reports in percentages.
Computer event Reports

This report displays a list of all the events within the report period, grouping them depending on the machine on which they were generated. Within each group, the events are sorted with the earliest event first.

For computer event reports only custom reports can be created. Click on 'Settings…' in Properties > General page for customizing your report. You will be able to control which Event IDs, domain names, computer names or user names to include in your report, or, alternatively, choose to include them all.

As with User reports in percentages you must specify a report period.

Computer events in percentages reports

This report displays an overview of the events generated on each machine you have configured in GFI LANguard S.E.L.M. The events are grouped per machine, and displays the total number of events for each user on that machine. The users are ranked with the one who has generated most events on top.

The settings for computers events in percentages are similar to the ones of Computer event reports.

Home Contents Previous Next