When creating a report on EventsManager, you may expect some fields to contain certain information. In this case, these fields are filled with 'N/A'.
This is due to the fact that some fields have a different name depending on the operating system.
For instance, some reports as 'Failed Logons' are set to show only the 'User Name' field of events coming from Windows 2003 operating systems. In this case you must manually add the field for Windows 2008 to show the correct information, otherwise the report will show N/A in the 'User Name' field on Windows 2008 events.
- In Windows 2003 the field is called 'User Name'
- In Windows 2008 the field is called 'Target User Name'
Follow the steps below to add both fields on the report 'Failed Logons' to show all the user names:
- Go to the Reporting tab
- Open the Properties of the Failed Logons report
- Click the Layout tab > Add existing column
- Add the field Target User Name
Note: To see the field name on each operating system, go to the Event Browser tab. Select the desired event and you will see the appropriate field on the Event description fields pane.
For guidance with eliminating the N/A variable from the reports, refer to: How to Map Multiple Fields to One Column in GFI EventsManager