Edit Event Summary Report

[kevinoie]

Hi, Is it possible to edit the event summary report?

The below fields are what I would like to include.

Assetname

tblAssetCustom.Manufacturer

tblOperatingsystem.Caption

Sourcename

Eventcode

Message

Logfile

TimeGenerated

Not sure if this is possible, but any help or advice would be greatly appreciated.

Many Thanks,

Kevin.

[kevinoie]

thanks again. Exactly what I was looking for..

[Hemoco]

Just filter on the time generated:

Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblOperatingsystem.Caption,
tblAssetCustom.Manufacturer,
tblNtlogSource.Sourcename,
tblNtlog.Eventcode,
tblNtlogMessage.Message,
tblNtlogFile.Logfile,
tblNtlog.TimeGenerated
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tblNtlog On tblAssets.AssetID = tblNtlog.AssetID
Inner Join tblNtlogSource On tblNtlogSource.SourcenameID =
tblNtlog.SourcenameID
Inner Join tblNtlogMessage On tblNtlogMessage.MessageID = tblNtlog.MessageID
Inner Join tblNtlogFile On tblNtlogFile.LogfileID = tblNtlog.LogfileID
Inner Join tblOperatingsystem
On tblAssets.AssetID = tblOperatingsystem.AssetID
Where tblNtlog.TimeGenerated > GetDate() - 7 And tblAssetCustom.State = 1

[kevinoie]

Thats brilliant. Thanks so much. Is there any way I can limit the number of events to that of the last 7 days?

[Hemoco]

Try this:

Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblOperatingsystem.Caption,
tblAssetCustom.Manufacturer,
tblNtlogSource.Sourcename,
tblNtlog.Eventcode,
tblNtlogMessage.Message,
tblNtlogFile.Logfile,
tblNtlog.TimeGenerated
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tblNtlog On tblAssets.AssetID = tblNtlog.AssetID
Inner Join tblNtlogSource On tblNtlogSource.SourcenameID =
tblNtlog.SourcenameID
Inner Join tblNtlogMessage On tblNtlogMessage.MessageID = tblNtlog.MessageID
Inner Join tblNtlogFile On tblNtlogFile.LogfileID = tblNtlog.LogfileID
Inner Join tblOperatingsystem
On tblAssets.AssetID = tblOperatingsystem.AssetID
Where tblAssetCustom.State = 1