Top matched logged rule report

[Robert_Stack]

Is there way in SmartEvent to create a report of the top matched logged rule?

[PhoneBoy]

This should be in the Logging, Monitoring, & Event Analysis‌ space.

What information do you want in the report? 

Note, tou can also see what rules are getting hit most often by looking at the Hit Counters in the rulebase itself.

It's possible you may have the Hits column disabled, in which case, right click on the column headings on your rulebase and enable it.

[Robert_Stack]

Thanks Dameon I am aware of the Hit Counters column. We would like to pull a report if possible of the top hit rules for the day, week, month. With this information we can move those rules to the top of the policy for better performance.

[Rodney_Hopkins2]

Maybe something like the attached template?  It's a basic start.  It could be tuned to run against specific policies to perhaps make it more meaningful.

[Sung-Lun_Yang1]

Hi Rodney,

Thanks for your sharing.

I downloaded the attachment and trying import to my R80.10 SMS, but that display import failed.

Would you mind check about this?

[Rodney_Hopkins2]

Yes, you're right.  The original template fails to import.

I've replaced it with an updated file that successfully imports.  Give it a try.

Thanks,

Rodney

[Sung-Lun_Yang1]

Hi Rodney,

I successful import the report template to my R80.10 SMS.

Thanks for your sharing, this is very good example for rule usage.