|
In this topic: |
The Event Data Grouping determines how data is displayed in the Events window or in a Report. A different view of the data reveals and highlights different information.
In an Events Window, changing the Event Data Grouping changes the structure of the "tree" in the upper left Navigate pane and affects how you drill in to data records. For example, you can arrange to see Chat/IM organized by Chat Type first (AOL, XMPP. MSN, etc.) to see at a glance what types of chat are occurring.
In an Aggregate Report, changing the Event Data Grouping affects how totals are aggregated. For example, you can arrange to see Email grouped by incoming mail rather than dates for each user.
In a Detail Report, changing the Event Data Grouping changes how individual events are reported. The top level of a Network Events report, for example, could be Domains (e.g., getmusic.com) instead of Users.
Events (an activity type) is always the top of the hierarchy. Under Events there might be users, event dates, program used, and so on.
The Navigate Pane shows the Events Data Grouping you choose
To open Event Data Grouping:
Click the Grouping button at the top of the Events window or on the Report Settings dialog box. The Event Data Grouping box shows unused Data Groups in the right pane and the current group structure in the right pane.
|
|
Changing the Event Data Grouping for a Report or Events window affects only the current form. For example, if you customize the Network Events data grouping for a Data Explorer form, it will not affect the Network Events data grouping for Reports. |
Not all possible data is included in a data group. You can add and remove data items from a group.
To add a data group:
Drag a group from the left Data Groups list (such as "Host") and drop it on the tree in the right pane. An arrow and plus (+) sign indicates that you may drop the group at the current location in the tree. The group will not "drop" where a stop sign appears or above the top "Events" branch in the tree.
To remove a data group:
Drag the data group (for example, "Program") from the tree in the right pane and drop it back in the Data Groups list on the left. An arrow and minus (-) sign indicates that the group is being removed. Click OK to close the Event Data Grouping window and see your selections in the Events window.
|
Network Events Data Grouping: |
After adding "Host" and "Domain" |
Changing the hierarchy of Data in the Event Data Grouping changes the way the Event Data Grouping and Summary pane behave in the Events window.
To change the way you select and view event summaries:
Drag and drop branches in the Event Data Grouping.
Click on a Group in the right "tree"
panel and drag it up or down the tree.
A yellow arrow points to the insertion line in the tree.
A Stop symbol indicates when you cannot drop the group at a location.
A Return symbol indicates that the group's position will not change
at a drop location.
Click OK to close the Event Data Grouping window and see the rearranged data in the Events window.
|
Network Events window before Data Grouping changes
|
|
|
Program
Instance Count |
You can reverse the ordering of elements in a data group. For example, you can change the order of users from Allen-Zelig to Zelig-Allen. You can display events from most recent to earliest (descending), or earliest to most recent (ascending).
Groups are ordered by date/time, number, or alphabet, depending on the data group. Ascending is A-Z or 1-10; descending is Z-A or 10-1.
To reorder elements of a group:
Click "Ascending" or "Descending"
in the Sort Order column of the right pane. A drop-down arrow appears.
Click the arrow to display your choices. Select the Ascending or Descending option to set the order you want.
Click OK to close the Event Data Grouping window and see the rearranged data in the Events window.
Opening Event Data Grouping
