Overview

This article provides a step-by-step process on mapping multiple fields to a single column in the GFI EventsManager.

Process

When using the reporting features inside GFI EventsManager, it may be desirable to map multiple event fields to a single column:

1. Launch the GFI EventsManager 2012 Management Console.
2. Go to the Reporting tab.
3. Navigate to the desired report which you would like to map multiple fields to a single column.
4. Right-click the report and select Properties.
   

   

5. Select the Layout tab.
   

   

6. Add a custom column and define an appropriate column name. In this example, Test Column Mapping is used. However, User Name would be more appropriate since this is the data that will ultimately be in the column.
7. To map the event fields to this column, select Add.
   

   

8. In Field Name, type the exact name of the field used in the events. In this example, event id = 4634 uses the target user name and event id = 538 uses user name to display the user account which triggered the event.
9. It is then necessary to create a condition to define when this event field should be used in the report. To do this, select Add in the Edit Restrictions section.
   

   

   In this example, the user name is mapped to the column Test Column Mapping when the event id = 538 , and the target user name is used when the event id = 4634.
   

   

10. Select OK on the Properties windows to apply the report settings.
11. Right-click the report and select Generate for the desired interval.
12. This will output the results in the report as pictured below: