Featured Objects 7.2 Object Collection Guide
Summary
The LogRhythm Knowledge Base now includes a new module named Object Collection: Report Templates: 7.2 Featured Objects. This module contains Case Report Templates that can be used to create and run Case Metric Reports.
Compatibility
This module is only compatible with 7.2 environments and later due to the release-specific objects required for the included reports. Customers on releases prior to 7.2 should not attempt to import this module, as it will cause the Knowledge Base Sync to fail.
Error Handling
If users attempt to import this module in a pre-7.2 deployment, they receive an error message. To remove the error and continue with the import/sync, clear the Action checkbox of the incompatible module in the Select KB Modules to Synchronize section. No permanent damage is caused by triggering this error. For more information, see synchronization instructions in Import a Knowledge Base.
Module Contents
The following table describes the Report Templates that are included in the module.
Report Name | Report Description | Report ID |
|---|---|---|
Case Details | Summary of all cases open/closed in the date period selected, a paged report with information about each case | 217 |
Case Metrics by Time | A CSV-Friendly Case Timestamp Report – intended to be exported as a CSV, provides a data dump of cases and all associated data for a given time range so they can use it in Excel, for example, to calculate metrics or generate custom reports as they choose | 218 |
Case Metrics Rollup | Averaging the below metrics for a given period of time - not broken down by any case properties right now | 219 |
Case Metrics Summary | Breakdown of case count grouped by status, priority, owners | 220 |
Case Metrics Tags Summary | Breakdown of case count grouped by tags and status | 221 |
Case Metrics Details | Calculated metrics for below-defined metrics per case | 222 |
The following Metrics are calculated in these reports:
- Case Duration. The time elapsed between Case creation and Case closing or resolution.
- Time to Response. The time elapsed between Case creation and Case mitigation.
- Incident Duration. The elapsed between which a Case is marked as in Incident and when it is resolved.
- Time to Incident Recognition. The time elapsed between Case creation and when it is marked as an Incident.
Create Report from the Template
- After syncing the module, click the Report Center on the main toolbar.
- Click the Report Templates tab and filter the Template Type column by Case Management.
- Right-click the report template you’d like to use, and then click New Report from Report Template.
Complete the Report Wizard steps to create and configure the new report.
You cannot configure the Log Source Criteria or Additional Report Criteria since those are not applicable to Case Data.- The report appears in the Reports tab.
