Multi-level summary investigative reports

Administrator Help | Forcepoint Web Security and Forcepoint URL Filtering | v8.5.x

Related topics:

Investigative reports

Summary investigative reports

Flexible detail investigative reports

User Activity Detail investigative reports

Standard investigative reports

Favorite investigative reports

Scheduling investigative reports

Outliers investigative reports

Output options for investigative reports

Multi-level summary reports show a second level of information to supplement the primary information displayed. For example, if the primary display shows risk classes, you can define a second level to learn which categories have been requested most within each risk class. As another example, if the primary report shows requests for each category, you might show the top 5 categories and the 10 users who made the most requests to each.

Use the settings immediately above the summary report to create a multi-level summary report.

In the Select top list, choose a number to designate how many primary entries (left column) to report. The resulting report includes the primary entries with the largest values. (This shows the earliest dates if Day is the primary entry.)

Alternatively, mark the check box beside the desired individual entries in the left column to report only those entries. The Select top field displays Custom.

From the by list, choose the secondary information to report.

In the Display field, choose the number of secondary results to report for each primary entry

Click Display Results to generate the multi-level summary report.

The summary report updates to show only the selected number of primary entries. Below the bar for each primary entry, a list of secondary entries appears.

Use the arrows beside a column heading to change the report's sort order.

To return to a single-level summary report, select a different option under Internet Use by. Alternatively, click one of the primary or secondary entries, and select an option to generate a new investigative report of that information.