When creating reports, you should only request the data that is relevant to the report's intended audience. The more items you chose from the report options for a report, the longer it will take to generate the report. This is especially true when reporting on patch management items, where there are many filtering options and patches, performance can be less than optimal depending on how much data is being parsed.
Questions to Consider Before Creating a Report
- Do you want to report on specific devices or a site?
- Do you want to brand the report by including a logo on the front page? What information do you want in your report?
- Do you want the report to include which device is getting the most alerts?
Overview of Report Sections
When creating a report, you select any of the following sections to include:
Alerts This section displays a summary of alerting activity at the site or device, including but not limited to the top alert categories generated, alert resolution time, and the option to include suppressed alerts.
Asset Baseline (for site reports) Displays device information for device types that you specify, which can be Windows, macOS, iOS, Android, printers, Linux, and other devices. You can also apply filters to all device types, including warranty expiry date, device end-of-life date, and discover date within the reporting period.
Asset Inventory(for device reports) Displays both hardware and software asset information about a device, including specifications, attributes, and a list of services running on the device. You can report on asset inventory for both Windows and non-Windows devices.
Automation Details Displays details for task outcomes, which you can filter to include successful executions, script errors, delivery or system errors, and skipped tasks. You can also choose to show only the most recent task results for recurring tasks.
This report section only reports on scripts that have been executed through a recurring scheduled task or policy. Scripts that were run using Run Now, scripts that haven't been executed yet, and scripts that are scheduled but don't recur are only included if you select the All non-recurring tasks option.
Automation Summary Displays a summary of results for tasks based on recurrence type, including one-time executions, and daily, weekly, and monthly executions.
Device Attributes (for site reports) Displays warranty expiry, end-of-life, and inventory and asset tag information for devices at a site.
Hardware Assets (for site reports) Displays a summary of hardware assets, including devices by type, processors, physical memory, and physical and logical disks. Also displays inventory information, including monitors, network cards, sound cards, video cards, and more. You can choose to display inventory information for both Windows and macOS devices.
Network Statistics Includes information on device availability, including device availability by date, bandwidth statistics, total uptime and downtime, and network services availability.
Patch Management Displays patch management summary information at a site or device. For site reports, this section displays a count of patches by status and summaries of device status and patch status. For device reports, this section displays summary information of patches applied to the device.
Performance For site reports, this section displays top devices by CPU utilization, memory available, and used hard drive space. For device reports, this section displays information about each performance counter being monitored on the device. You can also choose to filter the results to list selected counters only.
Remote Control For site reports, this section displays remote control summaries, including session summaries, total session time and count, and remote session details. For device reports, shows a list of remote sessions, including who initiated the session, the protocol, the client, and start and end times.
SNMP For site reports, lists the top devices by the SNMP OID that you specify. Also displays the top SNMP trap messages. For device reports, displays a list of SNMP OIDS, which you can optionally filter to show only certain OIDs.
Software Assets (for site reports) Displays inventory information for operating systems, including Windows, macOS, and iOS and Android devices. Also displays installed software inventory and software details by device. For software inventory, you can display both Windows and non-Windows software.
Trouble Tickets For site reports, displays graphs to show trouble ticket summaries by user, trouble ticket resolution times, and trouble ticket trends. Also displays more detailed trouble ticket summaries, allowing you to filter by assignee, priority, and status. For device reports, displays the trouble tickets that were created for the device.
Windows Events Summary For site reports, displays two tables: a summary table of top events, organized by event log and severity, and a table of devices that generated the highest number of events, based on a single user-defined filter. For each event, displays the event ID, severity, timestamp of first occurrence, timestamp of last occurrence, sample description, and total count. For device reports, displays a table that summarizes events generated by the device. Displays event ID, severity, timestamp of first occurrence, sample description, and total count for each event.
Windows Events Details Displays Windows Events returned by up to 10 user-defined filters that search the Windows Events Logs by event source, including or excluding events according to their event IDs, or filtering by event severity. Users can assign a highlight color and precedence, which is displayed in tables, along with each event's ID, source, log, severity, time of event, and description. For site reports, a table of events is displayed by site. For device reports, a table of events is displayed by device. Both site and device reports include a pie chart of results selected by choosing a highlight color and precedence. Events that do not have a defined highlight color are not included in the pie chart, but still appear in tables. If an event is returned by two different filters, it is included in the filter with the highest precedence. Both site and device reports are limited to a maximum of 10,000 events. If the report executes against multiple devices, the limit of 10,000 events is divided equally between each device's Windows Event Details section. For example, if a report is run against 500 devices, each device's table displays a maximum of 20 entries.
Aggregate Site Device List For site reports, displays a count of devices. Counted devices include:
- Total devices
- Total servers
- Total workstations
- Total printers
- Total network devices (Devices not classified as other hardware types)
- Total devices with Avast Antivirus installed