Top Events Reports

The Top Events Report allows the user to “extract different types of data, from a extract different types of data, based on the configuration of a data source(s). WOCU-Monitoring performs a collection and grouping of the most repeated events from different configurable configurable data sources.

In short, through this report, the user can consult the events generated by WOCU-Monitoring in relation to the Assets managed by the tool, and find out which devices have a higher and lower number of events collected by the data source.

The process of creating and executing reports is detailed below by setting up a series of filters and parameters that are custom configured by the user.

Configuration and generation of Top Events reports

In general, when creating reports, the user must access the blue button New Report, located in the Reports.


Before generating the report, it will be necessary to set a number of filters and parameters as described below.

Scheduling Reports

WOCU-Monitoring also allows the automation of the reports, thanks to the possibility of scheduling their generation and launch at the user’s discretion by means of the New Scheduling. For more information, see: Scheduling.


In this drop-down field, the user must select the type of report he/she wishes to create, in this case Top Events.



Depending on the type of report selected, new fields to be defined will be automatically included.


In this optional field the user selects the template to be applied to the Report. Templates are created prior to reports. This element is further developed in section Templates.


Mandatory field in which the user assigns an identification term that differentiates the report from the rest.


Optional field where the user may include descriptive text relating to the report.


In this field the user shall determine whether the report will be visible to other users, i.e. a public report, or on the contrary will be private and will only be visible to the creator of the report.

Show by source (Show by)

By selecting one of the two options in this menu, Logger resources and Logger resources types, it is possible to select which data sources will be used to generate the Event Report with the most occurrences.

  • Logger resources are various data sources and event logs that report on the status of the monitored Hosts registered in WOCU.

  • Logger resources types are groups of Logger resources created and configured in WOCU in order to display together similar data from different Logger resources.


By pressing the corresponding buttons, Logger resources and Logger resources types, it is possible to switch alternatively between the two options. The selected option will be highlighted in blue.

Once you have selected the Logger resources option or the Logger resources types option, you will have to select one or more of the sources or types of sources listed under the buttons (the options selected by default will be highlighted with a grey background and those selected by the user with a blue background). To select multiple options, hold down the CTRL key while clicking on the name of the options you wish to select.


Logger resources and Logger resources types are created and configured in WOCU by your Administrator.


This option sets the number of records to be presented in the report.


To set the number of records displayed, select from the drop-down the number of records you want WOCU to include in the report. The available options are: 5, 10, 20 or 30 records.

Host Group

This configuration parameter allows filtering the data collected and reflected in the report, showing only those related to the Host Groups existing in WOCU.


To select and filter the results of the report by a specific Host Group, simply choose the name of the group from the Host Group drop-down menu. All the groups registered within the realm will be displayed.

To deactivate the filter, the user must choose the No HG filter option, which appears first in the list.

In the case of a Multirealm, the list will show the Host Groups defined in the different realms that make up the set. To indicate to the user that a given Host Group belongs to one of the realms that make up the Multirealm, the name of the realm to which the Host Group belongs is enclosed in square brackets (“[Realm]”).


Date interval

Before running the report, it is necessary to indicate to WOCU a date range(s) or time frame(s) to which the data reflected by the report will refer.


There are a number of time criteria already in place:

Today: filters and displays only the events generated during the time period elapsed in today’s day.

Yesterday: generated yesterday.

Last 24 hours: generated in the last 24 hours.

Last 48 hours: generated in the last 48 hours.

Last 7 Days: generated in the last seven days.

Last 30 Days: generated in the last 30 days.

This Week: generated during the period of time elapsed in the current week (from the start day of the week to the current day).

This Month: generated during the period of time elapsed in the current month (from day 1 to the current day of the month).

Previous Week: generated in the previous full week (Monday to Sunday).

Previous Month: generated in the previous full month (from day 1 to days 28/30/31).

In case you want to set a specific period of time there is the option Custom Range. To configure the time frame it is necessary to set a start date and an end date. By clicking on one of the days, this date will be set as a selection, being marked with a blue background. In addition to the day, a specific time can be set for that day, using the drop-down menus in the hour, minute and second boxes, until the desired time is set. The selected date and time can be seen both in the upper boxes and in the lower part of the view.


Once the programming has been carried out, click on the Apply button to apply the programming.

By clicking on the button with the plus sign (“+”), it is possible to add multiple date ranges on which the Most Problematic Hosts Report will be applied. Date ranges can be deleted by clicking on the red button with the cross (“x”). Once the delete option is clicked, the range will disappear and only the remaining ranges will be applied when the report is run.


Execution and scheduling of Top Event Reports

To save the configuration and generate the report, click on the blue blue Create.


Once the report has been created and programmed, you will go back to the initial screen of this section, where the reports will be stacked sequentially in the reports in the Reports. Within the panel is the user can access the generated report by clicking on the name of the report.


The user is then directed to a new window dedicated to the report where information generated and collected by the system. These panels are described in detail in the following section.

Scheduling Reports

WOCU-Monitoring also allows for the automation of reporting, thanks to the ability to schedule its generation and release based on user criteria through the Scheduling option.

Exporting Top Event Reports

WOCU-Monitoring also allows the export of the report in PDF, CSV and JSON formats. These condense all information on the availability of the monitored assets in a document that can be easily dissemination and simple analysis.


Through the Export selector located in the global report panel, the corresponding files shall be downloaded.

Analysis and Options for Top Events Reports

The information generated by WOCU for this type of Report is presented to the user through a configuration panel, a general graph and a detail table.


Top Event Report configuration panel

This configuration panel presents the filters and parameters set in the configuration of the generated report.


These are

ID: Report identifier code.

Name: Identification name assigned to the report.

Description: Descriptive text relating to the report.

Comments: Displays the comments added by the user when creating the report.

Create at: Indicates the date and time the report was created.

Create by: Indicates the user who created/owns the report.

Realm: Indicates the name of the Realm which is the subject of the report.

Event amount limit: Indicates the number of records to be presented in the report.

Grouped by: Indicates the type of grouping selected for the collection and grouping of Events. The available options are: Logger resources or Logger resources types.

Logger resources: Indicates the type of Logger source (Logger resources) selected for the collection and grouping of Events.

Date intervals: Indicates start and end time and date of the reporting period.

Overall Hosts/Events Chart

The overall graph of the Most Occurring Events Report visually reflects the ranking of Hosts with the highest number of events, collected by the selected data source for the report in the specified interval. The items displayed are ordered from the highest to the lowest number of events.


Each Host is named on the vertical axis of the graph, indicating graphically the volume of events generated by it. The horizontal axis expresses the scale, although the precise number of events generated by each element is reflected inside each bar.

In case several data sources are used in the report, different coloured bars will appear indicating, according to the legend (at the bottom right), which is the corresponding data source from which the events reflected in the graph originate.

Hovering the cursor over each of the bars in the WOCU graph will display additional information about the selected Host in a pop-up panel.


First the name of the Host will be displayed, then the number of events shown in this graph, the realm to which the Host belongs, the logger resource or logger resource type from which the displayed events originate, and finally the total number of events recorded in WOCU for this element in all configured data sources.

Detailed table of Hosts/Events

Additionally the Hosts together with their Events are listed in a table in order to complete the information presented in the report.


The information in the table is organised in a series of fields as described below:


Indicates the name of the Host with Events.

Top 3 problematic logger resources

Indicates, in case data from several data sources are shown in the Report, which three data sources account for the majority of the events shown.

Number of problems/subtotal

Indicates the number of events for each Host against the total number of events, for the data source(s) in the selected interval(s).

Percentage of total (% of total)

Indicates what percentage the event volume of the Host represents compared to the total number of events contained in the data source(s) in the selected interval(s).

Option Checkout data sources

When you click on the host name, three columns with three additional fields appear (click on the minus icon if you want to hide this information again).

  • Logger resource (#log): indicates the name of the Logger resources or Logger resources types, from which the events have been extracted and, in brackets, the number of events each one has recorded for this Host.

  • Percentage of Host Scope (% Scope:Host): represents in a graph the percentage of events that each data source represents in the total number of events in the Host.

  • Percentage of Scope over Total (% Scope:Total): represents in a graph the percentage that the events of a Host represent against the total number of events of that data source.


The different navigation, search and sorting options available on this screen are explained in detail in the section: Common navigation, filtering and sorting options in WOCU.