Submit a ticketCall us

Have You Auto Renewed? If not, you're missing out.
The SolarWinds Renewal Program comes with a host of benefits including the most recent product updates, 24/7 technical support, virtual instructor-led training and more. Experience all of this with the convenience of Auto Renewal, and never worry about missing any of these great benefits. Learn More.

Home > Success Center > Archive > 2017October31 - LEM Deletes > Configuring LEM Default Batch Reports on Windows

Configuring LEM Default Batch Reports on Windows

Created by Caroline Juszczak, last modified by Kevin.Swinson on Oct 31, 2017

Views: 115 Votes: 1 Revisions: 7

Before you install LEM Reports, be sure to choose a computer that supports the application. After you install the application, you can schedule your reports.

The installation includes a default batch set of INI files used to schedule reports. These files contain the configurations necessary to schedule several best-practice reports on either a daily or weekly basis, depending on their scope.

Choose a Reports computer

The LEM Reports application runs on the following versions of Windows:

  • Windows 10, 8, and 7
  • Windows Server 2016, 2012 R2, 2012, 2008, and 2003 

Choose a computer that meets the following requirements:

  • The system runs overnight. This is important because the daily and weekly start time for these reports is 1:00 AM and 3:00 AM, respectively.
  • The computer has at least 512 MB of RAM. SolarWinds recommends using a computer with 1 GB of RAM or more for optimal reports performance.

Following installation, include the LEM Reports application computer in the list of IP addresses defined by the restrictreports command in the CMC. For more information, see Configure report restrictions.

Prepare the INI File

Modify the default INI files in the LEM Reports installation directory to specify the hostname of the LEM manager or database in your environment and the export destination for your scheduled reports.

To modify the default INI files:

  1. Navigate to the LEM Reports installation directory and open the SchedINI folder:
    • On 32 bit computers: C:\Program Files\SolarWinds Log and Event Manager Reports
    • On 64 bit computers: C:\Program Files (x86)\SolarWinds Log and Event Manager Reports
  2. Open each of the BRPT*.ini files and make the following changes in a text editor,
    1. Replace the default value next to Manager1 with the hostname of the LEM Manager or database appliance in your environment. Use the hostname of your LEM database appliance if you have a dedicated appliance to store your normalized LEM alert data.
    2. Modify the ExportDest file path if you want to customize the location to which LEM Reports saves the exported reports. The default file path is %ProgramFiles%\SolarWinds Log and Event Manager Reports\Export.
  3. Save your changes and close the files.

Scheduling the Reports to Run

Schedule your batch reports to run using Windows Task Scheduler. Complete the following procedure twice: once for the daily reports and once for the weekly reports.

To schedule reports using Windows Task Scheduler:

  1. Create a new scheduled task by opening Control Panel > Administrative Tools > Task Scheduler.
  2. Select Task Scheduler Library.
  3. Click Create Basic Task in the Actions pane.
  4. Enter a name for your task that reflects the frequency of the scheduled task. For example, enter LEM Reports - Weekly for the weekly task, and then click Next.
  5. Select Daily or Weekly, depending on what batch of reports you are scheduling, and then click Next.
  6. Set the start time and frequency for your scheduled reports, and then click Next.

    For the daily task: 1 AM, Recur every 1 Day

    For the weekly task: 3 AM, Recur every 1 week, Monday

  7. Select Start a program, and then click Next.
  8. For the Program/script field, click Browse to browse for SWLEMReports.exe.
  9. In the Add arguments (optional) field, enter the following, according to the task being created.

    Use the %ProgramFiles(x86)% environment variable on 64-bit computers.

    The /l at the beginning of the additional argument is optional. This generates a log file called SWLEMReports.log when Task Scheduler runs your task. The file is saved in %ProgramFiles%\SolarWinds Log and Event Manager Reports.

  10. For the daily task: /l "%ProgramFiles%\SolarWinds Log and Event Manager Reports\SchedINI\BATCHDay.ini"
  11. For the weekly task: /l "%ProgramFiles%\SolarWinds Log and Event Manager Reports\SchedINI\BATCHWeek.ini"
  12. Click Next.
  13. Verify the task details on the Summary dialog, select Open the Properties dialog for this task when I click Finish, and then click Finish.
  14. Click Change User or Group to change the user account Task Scheduler that should be used to complete the task.

    Provide a user with administrator level permissions. If you specified a network location in Step 2 in Prepare the INI File, provide a user with write permissions to that folder. Also, use a service account to avoid having to maintain the task according to your password change policy.

  15. On the Properties window, select Run whether user is logged on or not.
  16. Select Run with highest privileges.
  17. Select the appropriate operating systems in the Configure menu, and then click OK to save your changes and exit the Properties window.
  18. Enter the Windows password for the user specified for this task, and then click OK.

Default Report Schedules

Once configured, the scheduled tasks run and export the following reports:

Daily Reports

  • EventSummary.pdf
  • SubscriptionsByUser.pdf
  • Incidents.pdf
  • NetworkTrafficAudit.rpt

Weekly Reports

  • MaliciousCode.rpt
  • NetSuspicious.rpt
  • NetAttackAccess.rpt
  • NetAttackDenial.rpt
  • Authentication.rpt
  • FileAudit.rpt
  • MachineAudit.rpt
  • ResourceConfiguration.rpt

You can open reports with the RPT extension in LEM Reports for filtering and exporting. If you have a program like Crystal Reports associated with this file format, you can access these reports with LEM Reports by opening the Reports console first and then clicking Open on the Settings tab.

If you create a scheduled report, you can remove the task from Windows task scheduler, and the .ini file will still be under the SchedINI directory. You can change the name of the RPTxxxxx-x.ini to BRPTxxxxx-x.ini, and add the file to the BatchDay.INI or the BatchWeek.INI.

Last modified

Tags

Classifications

Public