Run time condition for report
How to give run time condition for a report ?
for an example , i want to make a report which should ask for the device address while we click on run report and that device address is used as a condition.
Is it possible ?
If this is a report for Logger, then you can do this if you create a PARAMETER and then use that PARAMETER in the query.
You can have a preset list of devices to choose from, or you can have the person running the report enter in the information.
It is possible to do with a condition that the expected parameter should be the part of the logical condition.
If yes, then you can add those field has a parameter to the report.
To do so --> click on the parameter tab in which you could see report parameters below which you have an option called "add" by selecting it you can add desired field as a parameter to the report.
Varun P G
You may also find good information in the ArcSight Console's user Guide. Here is the link to the ESM 6.9.1 version:
Please visit the section: Displaying a Custom Parameter Prompt at Report Runtime on page 406 of the document.
Also, here is the link to ArcSight Products documentation:
I hope you find the above helpful.