Creating a distributed report

Edit online

Create and modify distributed reports in a central manager.

Before you begin

If you want to collect data from a group of managed units, verify that the group is defined.

About this task

Get a broader view and correlation insight for Exceptions (for example, SQL Errors) that are recorded on specific collectors.

Procedure

  1. Click Reports > Report Configuration Tools > Distributed Report Builder.
  2. Click New.
  3. Select a report from the Based on Report list as the base for this distributed report.
    Draft comment: jillgold
    (the list shows the User-Defined Reports)
    In this example, choose Exceptions Details.
    Draft comment: jillgold
    Reports that are defined to be distributed immediately have the term (Immediate) appended to the distributed report name.
    Draft comment: jillgold
    what are reports in upper pane, existing distributed reports? What are reports in Based On Report list, all Guardium reports? syas above - user defined reports
  4. Under Gather Data From, choose All Managed Units that the Central Manager is managing or specify certain Group and Specific Managed Units, whose data needs to included in the distributed report. If the Central Manager is also an Aggregator, it might need to be included.
    Draft comment: jillgold
    how do you know if yes or no?
    For this example, choose two groups from the Group list, and a few managed units from the Managed units list, but do not select the ‘Central Manager’.
  5. In the Operation Mode, select the type of report: immediate or scheduled. The Immediate mode is mainly for online or real-time monitoring, such as, view the recent Failed Login Attempts, view recent Excessive Exception, or view real-time alerts. The Scheduled mode is an ongoing data-gathering mode that runs periodically based on the Schedule defined. .
    Draft comment: jillgold
    what are Exception Description and Destination Address? Do not see them in UI.
    The Send data to and Send data to (secondary) fields define where distributed data is consolidated and made available for reports. By default, data is collected from managed units and made available on the central manager, but it is possible to send the data to any Guardium system by using these fields. Send data to (secondary) defines a backup or secondary system where data is also sent. Either Send data to or Send data to (secondary) can identify a central manager, and it is possible for both fields to identify managed units if the data is not needed on a central manager.
  6. Click Apply to create the Distributed Report.
  7. Define the schedule by clicking Modify Schedule to activate the process. A standard Schedule Definition window opens. Specify all the necessary details. See Scheduling for more information on scheduling.
  8. After the changes are applied, the new Distributed Report is added and highlighted in the list box.
  9. If you want to limit the roles for this report, click Roles to open the Assign Security Roles window; select the roles and click Apply.

Results

The data is gathered from all the specified Managed Units and is stored in new designated entity (table). This entity is now available through the Query-Report Builder for use when you create additional queries. The option to build additional queries are available through the Distributed Report result screen as well. Click Edit the query for this report.This default Report cannot be changed, click Clone, name it, remove all attributes and leave the Date, User Name, Exception Type Description, and Sum Of Count Of Exceptions.