Reporting Group

IT Analytics offers customers unparalleled flexibility in the way they visualize, analyze, and consume their business critical data. In addition to providing users a valuable and comprehensive reporting solution out of the box, IT Analytics’ flexible architecture and use of standard technologies gives users several options for report creation. This article outlines the various way the same report can be created within IT Analytics Data Loss Prevention Content Pack.

Creating a Report – Pivot Table

This example shows how to create a report showing high severity incidents by type through using the pivot table cube viewer in IT Analytics.

1. In the Symantec Management Platform console, select: Reports > All Reports
2. Open the IT Analytics folder and then expand the Cubes folder
3. Select the Incident Summary Cube.
4. Click anywhere inside the cube to display the Field List.
5. Drag and drop the Incident Count totals into the “Drop Totals or Details Fields Here” data pane.

6. Drag and drop the Incident - Severity attribute into the “Drop Row Fields Here” pane.

7. Drag Incident – Severity up into the “Drop Filter Fields Here” pane. Click on the downward facing triangle next to the Incident – Severity header to filer the result set. Uncheck all severity levels except High. Then click OK.

8. Drag and drop the Incident - Type attribute into the “Drop Totals or Details Fields Here” data pane.

9. Right-click on the Incident - Count column header and select Sort Descending. This will sort the number of high incidents by type.

The above example illustrates the ease of use with creating a report in IT Analytics, without previous knowledge of the DLP Enforce database schema or requiring any other programming skills. This very specific view can be saved for re-use or can be shared with other individuals in the organization.

Creating a Report – Excel

This example shows how to export a pivot table view from IT Analytics and work with it in Microsoft Excel.

1. Staying with the above example without modifying the pivot table orientation, click the Export to Excel button  in the toolbar of the pivot table browser. Note that to complete this step, Excel must be installed on the computer you are accessing the console from.

2. You should see the same report that was created in the pivot table format now within Excel. Note that even in Excel the same capabilities that were seen in the Symantec Management Platform console still exist, along with all the measures and dimensions that were available.
3. Locate and click the Incident – Status attribute from the PivotTable Field List pane on the right.

4. To regroup this report by Status first, click on the downward facing triangle next to the Incident - Status field in the Row Labels window in the bottom right, and select Move to Beginning.

5. This will reorder the report to group Incidents by Status.

6. You can then drill down within each status and see the same High incidents by specific status.

Creating a Report – Report Builder

This example includes building a report utilizing IT Analytics cubes in Microsoft Report Builder. Report Builder is a component included with SQL Server Reporting Services that allows ad-hoc reporting functionality, enabling end users to build their own reports and charts. Report Builder uses wizard driven steps to easily connect to data sources and locate the desired fields for creating a report. Users can then publish these reports back into the Symantec Management Platform console for viewing, as well as other venues like SharePoint and Reporting Services. For more information on using Report Builder, please see the Microsoft website.

1. Within the Symantec Management Platform console, navigate to: Settings > Notification Server > IT Analytics, then click on Reports in the left menu tree.
2. Click the Report Builder tab and then the Launch Report Builder button. 

3. Allow a few minutes for the application to load. Note that depending on which version of SQL Server you have, you may have a different version of Report Builder. This example covers Report Builder 3.0, which comes standard with SQL Server 2008 SP2 or higher. Note that while SQL Server 2005 meets the minimum prerequisites for installation of IT Analytics, it will only include Report Builder 1.0. If possible, Symantec strongly recommends using SQL Server 2008 SP2 or higher to take advantage of new features included in Report Builder 3.0 for a more robust custom report authoring experience. 

4. From the Getting Started screen, select Table or Matrix Wizard

5. In the next step you will be prompted to choose a dataset. A dataset includes the desired fields and values to populate the report, similar to how the totals and attributes were selected when building a pivot table view in the first example. If this is the first time Report Builder has been used there will most likely be no dataset to choose from.  Make sure the Create a dataset radio button is selected and click Next.

6. The next step will prompt you to choose a connection to a data source. A data source is the repository where the data for the report is stored. In the case of IT Analytics, the data is stored in the Microsoft Analysis Services Database specified when IT Analytics was installed. If you do not know the Analysis Services Database name,  the server where it resides, or have the credentials necessary to connect to it please contact your Altiris Administrator.

7. To create a new data source, click the Browse button and navigate to the ReportServer/IT Analytics folder on the server that houses SQL Reporting Services. Within that folder there will be a data source called ITAnalytics. Select this as the data source for the report and click Open.

8. Verify that the data source you just browsed to is displayed on the next screen of the wizard.

9. Ensure the connection to the data source is valid by clicking the Test Connection button in the lower right of the wizard. Assuming the test succeeded, you should see the following message:

10. Click Next and you will be prompted to design a query, which will make up the data set for the report. 

11. Click the  button toward the top of the window and select the DLP Incidents Summary cube.

12. Now we can drag and drop fields the same way we did in the pivot table report from the first example. Expand Measures and Incidents, then drag the Incident Count into the main query window.

13. Expand the DLP Incident Type attribute and drag Incident - Type into the query window.

14. Expand the DLP Incident Status attribute and drag Incident - Status into the query window, just before Incident - Type.

15. Expand the DLP Incident severity attribute and drag Incident – Severity to the filter section, which is directly above the main query window.

16. Check the Parameter box and under the Filter Expression dropdown, only select High and click OK. This will prompt the report to automatically filter by high severity when executed.

17. Click Next to complete the creation of the data set.
18. The next step will prompt you to arrange the fields to display properly in the table. Drag Incident_Count to the Values window and drag Incident__Type and Incident_Status to the Row Groups window. When completed, click Next.

19. The next step will prompt you to choose the layout of the report. Accept the default settings and click Next.

20. The next step will prompt you to select a style for the report. Choose a color scheme you prefer and click Finish.

21. You should see a sample table on the report canvas. The data source and data set that display on the left navigation have already been created for you via the wizard. Rename the title of the report to Incidents with High Severity.

22. Resize the font of the title so that it fits within the given area. Also, widen the columns of the table so that you can read the column headers. You can do this in the same way you would with Excel, simply click on the line between the columns, and when a grey bar appears at the top of the table, then expand by dragging the columns.

23. Preview the report by click the Run button.

24. The report that displays should look similar to both the pivot table report in IT Analytics and Excel. Expand OS types to identify which High Severity Incidents apply.

25. Select the Design button to go back to the Design view.

26. Click the  icon in the Report Builder toolbar to save this report to Reporting Services IT Analytics folder and name it “Incidents with High Severity”.

27. To link this report into the Symantec Management Platform console open the console then navigate to the Reports > IT Analytics > Reports > Data Loss Prevention folder.
28. Right-click on the Reports folder and select New > IT Analytics Report.

29. In the Report Type dropdown box, select Report and then in the Report Name dropdown select the Incidents with High Severity report. Then click the Add Report button.

30. You should see a message saying that the report was added successfully.
31. Refresh your browser and expand the Reports folder.
32. Locate and select the report you just added.

Conclusion

IT Analytics provides users several ways to author custom reports, from simple drag-and-drop views to leveraging proven 3rd party applications, all in an effort to deliver flexible and robust reporting. Creating the above examples without IT Analytics would require advanced knowledge of the underlying database schema, as well as proficiency in writing SQL queries. By utilizing IT Analytics and the techniques described above, users can significantly expand their options for custom reporting with very little effort or programming experience.