Skip to end of metadata
Go to start of metadata

When the reporting section is opened the user is presented with a list of report definitions. As with in other sections the list can be filtered and searched.

Generate Report

By double clicking on one of the report definitions in the list or by clicking the Generate button (or Generate report in the task list in the inspector bar) the user can open a wizard for an existing report definition.

In the wizard the user can change the report's source, edit its filter, select columns to include in the output and the run the report. After running the report the user is presented with a preview of the results and has the option of saving a copy of the report in a number of diffrent format.

Step 1: Select Source

Select one of the existing report definition to generate a report from or use as a basis for your new report definition.

If the user double clicked one of the rows in the report definition list this step in the wizard is skipped.

Step 2: Edit filter

In the second step the user has the option of editing the filter. She might want to make some adjustments of the fields in the filter of the selected report definition, for example extending a time span or selecting a different username. But there also nothing stopping her from changing the filter completely and defining her own report.

Conditions and parenthesis:

"And" means that all the conditions have to be met whie "Or" mean that sufficient is that any of the conditions is met.

It is possible to add parenthesis to create subconditions with a different operator. The report definition shown in the screenshot here above can be read as follows: "Last seen must be less than one month ago, lost must be true and either claimed or usage must be true". I.e. shown me hosts that have not answered during discovery in the last month that are either claimed or in us.

Comparison operator:

Depending on the type of field the user is presented with different comparison operators.

StringNumber, Timespan, DateBoolean, Pick-list, Object
doesn't equal
doesn't contain
starts with
doesn't start with
ends with
doesn't end with
matches regex
doesn't match regex
is not


Step 3: Select columns

Then the user can select which columns to include in the output.

All available columns are selected by default.

Step 4: Run report

Press the Finish button to run the report and get the results.

Preview result and download

If the report definition provided gives results the user is presented with a preview (at maximum the first hundred records).

The results can then be downloaded by pressing the download button. The dropdown offers a number of file formats to select from.

Sylk and CSV are handy for importing the data into a spreadsheet application for further processing.

Report sources

As is there are 24 report definitions in the list under Reporting. Twelve of those are what might be called base report sources, either sources that allow the user to query one particular object type in the system (e.g. Activity) or more sources that give access to a particular data relation in the system (e.g. Host discovery). The other twelve report definition are derivatives of the base report sources showing the specification possibilities they offer, Zone creation/deletion building upon Activity and IP reconciliation building upon Host discovery.



Address space merge conflicts*
DHCP lease activity
Discovered hardware addresses with multiple addresses*
DNS records

DNS zones
Host discovery*

IP ranges
Lease hardware address with multiple IP addresses*
Men & Mice suite messages
SOA Records

Administrator login
New users added
Range creation/deletion
Zone creation/deletion

Address records
Multi-labeled hosts
Enabled DNS zones of type slave
IP reconciliation
Discovered devices

SOA records with abnormal minimum TTL value
SOA records with abnormal refresh value

* Specialized report source.

Filter field types

String, numberDate and timeTimespanObject, boolean, options
Free text input.Date time string or current time delta shorthand units, e.g. -2w, +1d.Timespan shorthand units, e.g. 24h, 2d, 30mA dropdown is presented with the available options.

Timespan formats:

<num><time unit>
<time unit> ::= s (seconds), m (minutes), h (hours), d (days), w (weeks), M (months), y (years)

Date time formats:

General date time format consist of date and/or time (separated by a space).

<datetime> ::= <date> <time>
<time> ::= HH:MM[:SS[:TTT]][ AM|PM]
<date> ::= [yy]yy-mm-dd
| mm/dd/yy[yy]

Timestamps formatted according to RFC3339.


Current time deltas, i.e. a date time relative from now, can also be used.

-|+ <num><time unit>
<time unit> ::= s (seconds), m (minutes), h (hours), d (days), w (weeks), M (months), y (years)


To include more than one value for a particual field the field has to be added again to the filter with a Or condition. The Address records is an example of that, where the record type field has to be either A or AAAA.

  • No labels