Windows Event Log Reports

Within Goliath Performance Monitor,  by default all Application and System error and warning Event Logs are collected and held in the database for 7 days. Using this data, you have the ability to schedule reports to run on an automated basis, and or run on demand. Below, are instructions on how to run the reports specified in the article.

Configure Scheduled Event Log Reports

1. Connect to your Goliath console
2. Navigate to the Report>Schedule page of the technology
3. On the schedule tab, use the "Report Type" drop-down  to choose "Windows Event log Analysis"
4. Once the report type is selected, click on the "Choose Servers/Devices" button to next select the specific report that you'd like to schedule.
5. Upon pressing the button, a new pane will appear.
   
   1. Click the "option query" button
   2. Enter the specific event log query that you'd like to report on
   3. Check the boxes for "AND Params" and "Report Summary Only" and click ok
   4. By default, it will look for the event log events on all machines Goliath is monitoring, to customize click the "select" button and choose the machines
6. Once all of the options have been set click "ok" to save the configuration. You will then be taken back to the Schedule Reports screen
7. At the top of the page, you can optionally modify the report name field
   1. 
8. At the bottom of the page, schedule the report frequency:
   1. Run Report Every - click in the white space to configure how frequently the report will run and generate. Once finished, click on the arrow icon to save the field
   2. Start At Date/Time - click in the first white space to choose the date of the initial report. Click in the second white space to choose the time when the report will run. Once finished, click on the arrow icon to save the field.
   3. For Previous Period - click on the white space to configure how much historical data the report will include. (In most cases this will be the same as the "run report every" field. Once finished, click on the arrow icon to save the field.
   4. 
   5. 
9. Optionally, click the "email report" check box to enable the report to be sent via email.
10. If the report will be emailed, then use the radio buttons to the left to choose who the report will be sent
    1. Link Only - An email with a hyperlink to view the report
    2. Attach Report As - An email with the report attached as a PDF, CSV and or HTML file(s)
11. If the report will be emailed, lastly click the "specify email details" button to define the email address(es) where the report will be sent and the subject of the email
    
    1. 
12. By default, all generated reports are saved as an HTML file in the "reports" folder of the Goliath install directory. If you would like to also save the report as a PDF and or a CSV check the appropriate boxes in the "Export Report" field. 
13. By default, all generated reports are named "RPT*" with a random number value. To override this setting, optionally define a report name. To make the report name unique use the macros &D or &T to add the date and or time to the report name.
14. By default, all generated reports are saved as an HTML file in the "reports" folder of the Goliath install directory. To override this setting on a per report basis, enter a new path in the "optional report folder" field.
15. By default, all generated reports will have the URL of "https://{goliathserveraddress}/reports/{reportname}".T o override this setting on a per report basis, enter a new URL in the "optional URL to report" field.
16. When finished, click the "Schedule Report" button
    1. If you dont not see "Schedule Report" button, this means that one of the required fields was not completed. Make sure that the 3 fields defined in step 9 are configured an all of the arrows are clicked in. 
17. To modify an existing scheduled report, see the "queued" tab at the top of the screen.

Run Reports On Demand

1. Click the ‘Report’ tab and then select the ‘View’ submenu 
2. On the page, you will see blue links. Select the line item for "Windows Event Log Analysis" and then click the "Analyze" button at the bottom of the page
3. A new pane will appear named ‘Specify Report Parameters’
   1. choose how many days/hours that you’d like to report
   2. Click the "option query" button
   3. Enter the specific event log query that you'd like to report on
   4. Check the boxes for "AND Params" and "Report Summary Only" and click ok
   5. By default, it will look for the event log events on all machines Goliath is monitoring, to customize click the "select" button and choose the machines
4. Click ‘Ok’ to approve the report parameters and run the report
   1. Please note that the report generation process is tied to this page. If you navigate away from the page or click any other buttons on the page it will break the report process.
5. When the report is completed, select the report and then click the ‘Status’ tab to view the results.