Reporting Group

IT Analytics offers customers unparalleled flexibility in the way they visualize, analyze, and consume their business critical data. In addition to providing users a valuable and comprehensive reporting solution out of the box, IT Analytics’ flexible architecture and use of standard technologies gives users several options for report creation. This article outlines the various way the same report can be created within IT Analytics Symantec Endpoint Protection Content Pack.

Creating a Report – Pivot Table

This example shows how to create a report showing computers with critical patches through using the pivot table cube viewer in IT Analytics.

1. In the Symantec Management Platform console, select: Reports > All Reports
2. Open the IT Analytics folder and then expand the Cubes folder
3. Select the SEP Alerts Cube
4. Click anywhere inside the cube to display the Field List
5. Drag and drop the Alerts total into the 'Drop Totals or Details Fields Here' data pane

6. Drag and drop the Virus – Threat Location attribute into the ‘Drop Row Fields Here’ pane.

7. Drag Virus – Threat Location up into the ‘Drop Filter Fields Here’ pane. Click on the downward facing triangle next to the Virus – Threat Location header to filer the result set. Uncheck (All) and select Heuristic. Then click OK.

8. Drag and drop the Alert – Actual Action attribute into the ‘Drop Totals or Details Fields Here’ data pane.

The above example illustrates the ease of use with creating a report in IT Analytics, without previous knowledge of the Symantec Endpoint Protection Manager database schema or requiring any other programming skills. This very specific view can be saved for re-use or can be shared with other individuals in the organization.

Creating a Report – Excel

This example shows how to export a pivot table view from IT Analytics and work with it in Microsoft Excel.

1. Staying with the above example without modifying the pivot table orientation, click the Export to Excel button  in the toolbar of the pivot table browser. Note that to complete this step Excel must be installed on the computer you are accessing the console from.

2. You should see the same report that was created in the pivot table format now within Excel. Note that even in Excel the same capabilities that were seen in the Symantec Management Platform console still exist, along with all the measures and dimensions that were available.
3. Locate and click the Computer – Operating System attribute from the PivotTable Field List pane on the right.

4. To regroup this report by Operating System Name first, click on the downward facing triangle next to the Computer – Operating System field in the Row Labels window in the bottom right, and select Move to Beginning.

5. This will reorder the report to group computers by Operating System.

Creating a Report – Report Builder

This example includes building a report utilizing IT Analytics cubes in Microsoft Report Builder. Report Builder is a component included with SQL Server Reporting Services that allows ad-hoc reporting functionality, enabling end users to build their own reports and charts.  Report Builder uses wizard driven steps to easily connect to data sources and locate the desired fields for creating a report. Users can then publish these reports back into the Symantec Management Platform console for viewing, as well as other venues like SharePoint and Reporting Services. For more information on using Report Builder, please see the Microsoft website.

1. Within the Symantec Management Platform console, navigate to: Settings > Notification Server > IT Analytics, then click on Reports in the left menu tree.
2.  Click the Report Builder tab and then the Launch Report Builder button. 

3. Allow a few minutes for the application to load. Note that depending on which version of SQL Server you have, you may have a different version of Report Builder. This example covers Report Builder 3.0, which comes standard with SQL Server 2008 SP2 or higher. Note that while SQL Server 2005 meets the minimum prerequisites for installation of IT Analytics, it will only include Report Builder 1.0. If possible, Symantec strongly recommends using SQL Server 2008 SP2 or higher to take advantage of new features included in Report Builder 3.0 for a more robust custom report authoring experience. 

4. From the Getting Started screen, select Table or Matrix Wizard

5. In the next step you will be prompted to choose a dataset. A dataset includes the desired fields and values to populate the report, similar to how the totals and attributes were selected when building a pivot table view in the first example. If this is the first time Report Builder has been used there will most likely be no dataset to choose from.  Make sure the Create a dataset radio button is selected and click Next.

6. The next step will prompt you to choose a connection to a data source. A data source is the repository where the data for the report is stored. In the case of IT Analytics, the data is stored in the Microsoft Analysis Services Database specified when IT Analytics was installed. If you do not know the Analysis Services Database name,  the server where it resides, or have the credentials necessary to connect to it please contact your Altiris Administrator.

7. To create a new data source, click the Browse button and navigate to the ReportServer/IT Analytics folder on the server that houses SQL Reporting Services. Within that folder there will be a data source called ITAnalytics. Select this as the data source for the report and click Open.

8. Verify that the data source you just browsed to is displayed on the next screen of the wizard.

9. Ensure the connection to the data source is valid by clicking the Test Connection button in the lower right of the wizard. Assuming the test succeeded, you should see the following message:

10. Click Next and you will be prompted to design a query, which will make up the data set for the report. 

11. Click the  button toward the top of the window and select the Sep Alerts cube.

12. Now we can drag and drop fields the same way we did in the pivot table report from the first example. Expand Measures and Alerts, then drag the Alerts into the main query window.

13. Expand the Alert attribute and drag Alert – Actual Action into the query window.

14. Expand the Computer attribute and drag Computer – Operating System into the query window, just before Alert – Actual Action.

15. Expand the Virus attribute and drag Virus – Threat Location to the filter section, which is directly above the main query window.

16. Check the Parameter box and under the Filter Expression dropdown, only select Heuristic and click OK. This will prompt the report to automatically filter by the heuristic virus threat location when executed.

17. Click Next to complete the creation of the data set.
18. The next step will prompt you to arrange the fields to display properly in the table. Drag Alerts to the Values window and drag Computer__Operating System and Alert__Actual_Action to the Row Groups window. When completed, click Next.

19. The next step will prompt you to choose the layout of the report. Accept the default settings and click Next.

20. The next step will prompt you to select a style for the report. Choose a color scheme you prefer and click Finish.

21. You should see a sample table on the report canvas. The data source and data set that display on the left navigation have already been created for you via the wizard. Rename the title of the report to Heuristic Alerts by Operating System and Alert Action.

22. Resize the font of the title so that it fits within the given area. Also, widen the columns of the table so that you can read the column headers. You can do this in the same way you would with Excel, simply click on the line between the columns, and when a grey bar appears at the top of the table, then expand by dragging the columns.

23. Preview the report by click the Run button.

24. The report that displays should look similar to both the pivot table report in IT Analytics and Excel. Expand Computer Operating System to identify which heuristic alert actions apply.

25. Select the Design button to go back to the Design view.

26. Click the  icon in the Report Builder toolbar to save this report to Reporting Services IT Analytics folder and name it ‘Heuristic Alerts by Operating System and Alert Action’.

27. To link this report into the Symantec Management Platform console open the console then navigate to the Reports > IT Analytics > Reports folder.
28. Right-click on the Reports folder and select New > IT Analytics Report.

29. In the Report Type dropdown box, select Report and then in the Report Name dropdown select the Heuristic Alerts by Operating System and Alert Action report. Then click the Add Report button.

30. You should see a message saying that the report was added successfully.

31. Refresh your browser and expand the Reports folder.
32. Locate and select the report you just added.

Conclusion

IT Analytics provides users several ways to author custom reports, from simple drag-and-drop views to leveraging proven 3^rd party applications, all in an effort to deliver flexible and robust reporting. Creating the above examples without IT Analytics would require advanced knowledge of the underlying database schema, as well as proficiency in writing SQL queries. By utilizing IT Analytics and the techniques described above, users can significantly expand their options for custom reporting with very little effort or programming experience.