cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question

Top matched logged rule report

Is there way in SmartEvent to create a report of the top matched logged rule?

6 Replies
Admin
Admin

Re: Top matched logged rule report

This should be in the Logging, Monitoring, & Event Analysis‌ space.

What information do you want in the report? 

Note, tou can also see what rules are getting hit most often by looking at the Hit Counters in the rulebase itself.

It's possible you may have the Hits column disabled, in which case, right click on the column headings on your rulebase and enable it.

Re: Top matched logged rule report

Thanks Dameon I am aware of the Hit Counters column. We would like to pull a report if possible of the top hit rules for the day, week, month. With this information we can move those rules to the top of the policy for better performance.

0 Kudos

Re: Top matched logged rule report

Maybe something like the attached template?  It's a basic start.  It could be tuned to run against specific policies to perhaps make it more meaningful.

Employee+
Employee+

Re: Top matched logged rule report

Hi Rodney,

Thanks for your sharing.

I downloaded the attachment and trying import to my R80.10 SMS, but that display import failed.

Would you mind check about this?

0 Kudos

Re: Top matched logged rule report

Yes, you're right.  The original template fails to import.

I've replaced it with an updated file that successfully imports.  Give it a try.

Thanks,

Rodney

0 Kudos
Employee+
Employee+

Re: Top matched logged rule report

Hi Rodney,

I successful import the report template to my R80.10 SMS.

Thanks for your sharing, this is very good example for rule usage.