So looking at the event view in OpsMgr console is nice, but what if you need to Export syslog data and send it to support? To do this you need to create a report.
- First, open the OpsMgr Console’s “Reporting” page, then click the “Authored Reports” folder in the navigation pane, then click “Design a new report” in the action pane.
- The system should ask you to authenticate. When Microsoft Report Builder appears, choose “Event” as the source data then click “OK”.
- In the “Entities” section click “Event”, then in the fields section hold the control key (Ctrl) and click “Date Time”, “Event Log Title”, “Event Type Title”, and “Event Logging Computer”, then drag these selected fields to the blue square in the report page view that says, “Drag and drop custom fields”.
- Under “Entities” choose “Event Detail”, then drag the field “Rendered Description” to the same fields section on the report page view.
- The final result should look like the image below, however notice that the fields aren’t in the best order.
- Click and drag “Event Type Title” to the left-most position, but notice how the top bar has broken into two sections “Event Type” and “Event”. To correct this, drag “Event Type Title” to the right until a dark blue line appears, then let go. The bar will reunite.
- Now, choose “Filter” from the menu bar.
- Under Entities click “Event”, then “Event Rule”, then “Rule”. Then, drag “Rule System Name” to the right pane and click “(no values selected)” to browse for a rule.
- Find the rule “JPPacks.MonitorSyslogs.CollectSyslogs” on the left box, and click the “>” button to move it to the right box, then click “OK”.
- Verify that your settings look correct, then click “OK”.
- Click “Run Report” from the menu bar to see if everything works!
- If you have sent any test events, you should see them in the report data.
- Now, click “Design Report” to switch back to the report edit mode, then click “File”, “Save-As” and save your report.
- You should now see your report in the OpsMgr reporting website wherever you chose to save it in Step 13. Clicking the report should run it and generate data.
- This report is only giving the OpsMgr event data processed through the condition detection module “System.GenericDataMapper”, and none of the PowerShell PropertyBag values we assigned. This is possible, but difficult and I haven’t yet figured it out.
- This person did manage to figure it out: Using the Data Warehouse Part 2 – Event Data .
- This report is UGLY! Not even a title!
- A couple parameters like computers to include\exclude would be wonderful.
- Adding this to the management pack so it automatically creates on import would be awesome too.
I’ll try to come back around to the items above, but for now this satisfies my immediate need. Thanks for reading!