Submit a ticketCall us

Announcing NCM 7.7
With NCM 7.7, you can examine the rules that make up an access control list for a Cisco ASA device. Then you can apply filters to display only rules that meet the specified criteria, order the rules by line number or by the hit count, and much more.
See new features and improvements.

Home > Success Center > Log & Event Manager (LEM) > LEM Reports Troubleshooting Guide > Running reports

Running reports

Table of contents

Updated March 11th, 2016

 

Launch Reports as an administrator the first time you run the application. Depending on your Windows security set up, you may always need to run reports using the Run as administrator option.

To automatically Run as administrator every time you run Reports:

  1. Right click the Reports application icon.
  2. Click Advanced on the Shortcut tab.
  3. Select the Run as administrator checkbox and click OK.

 

To set up reports for the first time:

  1. Locate the Reports icon in your Windows Start menu, right click it, and select Run as administrator to launch the Reports application.
  2. The first time you open Reports, a pop-up window displays the message "A manager list was not found. Please create a list containing at least one manager." This is not an error. Click OK to close the pop-up window.
  3. In the Manager Configuration pop-up window, enter the LEM manager name, which can be a hostname or IP address.
  4. Enter a Reports username and password. The username and password must already be defined in the LEM web console, under Build > Users. The user needs to have Administrator or Reports privileges, as defined in the Role menu in the LEM Web console. For details on creating a Reports user in the LEM Web console, see "Setting up a Dedicated LEM User for Reports Accessing" in the SolarWinds Log & Event Manager User Guide.
  5. To create a non-TLS connection, skip to step 6.

    SolarWinds recommends creating a non-TLS, unsecured connection first to verify that all communications are working and that the Reports user can login. After making sure everything works as expected, try creating a TLS secure connection.

    Note: LEM v6.0.1 is the first version supporting TLS for Reports. LEM v6.0.0 and older do not support TLS for Reports. Also note that TLS for Reports is a different communication than SSL/TLS on port 8443. That SSL/TLS communication is for Web and Air consoles.

    To create a TLS connection to LEM, perform steps 5a through 5e below.

    1. Open a PuTTY session to the LEM manager/database on port 32022.
    2. Enter cmc as the username and password as your password.

      Note: Log into your appliance as the cmc user to perform backend LEM functions using an SSH client. Also, be aware that password is the default password and can be changed.

    3. Enter manager to access the Manager Configuration menu.
    4. In LEM v6.0.1 and higher, enter enabletls to enable TLS.
    5. In LEM v6.0.1, enter dbrestart to restart the database. (The database restarts automatically in post-v6.0.1 LEM releases.) The database reads the new credentials.
  6. Select the green + (plus) icon to save your configuration and close the Manager Configuration window. The Data Source in the ribbon now contains the LEM Manager hostname or IP address.

    When more than one manager has been configured, closing the window resets the selected data source to the first one. This also happens after restarting the Reports application. Also, check before each report generated to ensure the correct manager has been selected.

    The SolarWinds Log & Event Manager Reports window appears.



You can now select, run, and create reports.

To run a report:

  1. Select a report to run, right click, and select Run Report.. The Enter Parameter Values pop-up window appears.
  2. Click Start Date/Time and enter the start time for the period covered in this report.
  3. Click End Date/Time and enter an end date and time period to be covered in the report.
  4. Click OK to save these parameters. The Reports application automatically switches to the View tab and displays the report results.

Reports connections

To ensure the Reports database connection in a typical LEM deployment (in which the LEM manager and database reside on the same appliance), disable the Windows firewall's three profiles. Or, also on Windows, add port 9001 exclusions to all three profiles when any firewall profile is enabled. The Reports database connection can fail if you do not disable the firewall or add exclusions to all profiles.

The Windows firewall contains the following three profiles: domain public, and private. For instructions on working with these profiles, refer to your Microsoft documentation

Although not as commonly deployed as the configuration described above, the LEM manager and LEM database can also be set up to be two separate virtual machines. In this configuration, the reports application communicates directly with the LEM database server, not the LEM manager.

In LEM versions 5.6.0 and later, the database appliance runs a Tomcat web app that provides Lucene database connectivity to the manager.

Last modified
15:17, 8 Feb 2017

Tags

Classifications

Public