WSM User Guide - WatchGuard Technologies

Using Report FiltersExcludeTo make a report that does not include records with the properties set in the Host, the Service,or the User Report Filters tabs.You can set a filter to Include or Exclude data in a report with three properties:HostHost IP addressPortService name or port numberUserAuthenticated user nameCreating a new report filterUse Historical Reports to make a new report filter. You can find the filters in the WatchGuard® installationdirectory, in the subdirectory report-defs with the file extension.ftr.1 From Historical Reports, click Filters.1 Click Add.2 Type the name of the filter. This name appears in the Filter drop-down list on the ReportProperties Setup tab.3 Select the filter type.As an example, if you have 45 hosts, graph the top 10 and list the remaining hosts as “other.” For a description ofinclude and exclude, see above.4 Complete the Filter tabs.To see the function of each item, right-click it, and then click What’s This?.5 When finished, click OK.The name of the filter appears in the list of the filters. The Filter Name.ftr file is in My Documents\MyWatchGuard\Shared WatchGuard\report-defs.Editing a report filterYou can change the properties of a filter. From the Filters dialog box in Historical Reports:1 Select the filter to change. Click Edit.The Report Filter dialog box appears.2 Change the filter properties.To see the function of each property, right-click it, and then click What’s This?.192 WatchGuard System Manager