Generating correlation reports

There are three types of reports available under Correlation section of Log360 Cloud:

Incidents overview report

This report gives you a summary of the recent incidents that have happened recently. To access this report,

• Click on the Correlation tab.
• Select Recent Incidents from the left menu.

Incident Report

An incident report provides information about every correlation rule that's enabled. It also displays the number of times a specific rule has triggered a correlation report.

To access incident report:

• Click on the Correlation tab.
• Select the desired rule name from the left pane.

Timeline View

The Event timeline gives details of all the events in the sequential order.

• To get the Event timeline for each incident on the table, click on Event Timeline link corresponding to the specific incident.

  

  

• To view the details of each log, click on Details next to each event.

  Event logs that match the correlation rule but exceed the search retention days can be reloaded.

  Make use of the Reindex option to reload archived event logs.

  

Exporting Reports

You can export all the correlation reports in either PDF or CSV format.

• Navigate to the required report, and click on the Export As option available on the top right corner.
• Select the format from the dropdown list to download the report.

The status of all the previously exported can be found in the Report export history ( ) icon, next to the Export As button.