Novell Sentinel provides many useful reports right out of the box, but what do you do when you are looking for a custom report? This session will explore how to leverage and integrate the third-party reporting tools Crystal Reports and Jasper. We will introduce you to the Sentinel and Jasper reporting environments from setup to basic usage. You will also learn how to create and generate highly customizable reports that present the Sentinel normalized event data in a format that fits your environment. Session Benefits During the session, you will: Learn how to set up a Crystal Reports and Jasper reporting environment Create basic reports for Sentinel with reporting tools Become familiar with the Sentinel and reports environments Briefly overview the syntax to parse and manipulate normalized Sentinel data Demonstrate the use of iReport, the graphical report designer for Jasper, to customize existing templates

1. Introduction to Crystal and Jasper
Reports for Novell Sentinel 6.1 ®
™
Norbert Klasen - Senior Consultant
nklasen@novell.com
Dean Liu - Developer III
dliu@novacoast.com
Jonathan Poon - Developer III
jpoon@novacoast.com

2. Novacoast, Inc.
Novacoast is an IT professional services and product
development company. We offer organizations our
technological experience so they can make informed
decisions and avoid costly IT mistakes.
We combine our customers' expertise with our
technical knowledge to rapidly deploy fixed cost
solutions customized for their environment.
Novacoast is a Novell Platinum Solutions provider.
®
With headquarters in California, we deliver services
nationally.
2 © Novell, Inc. All rights reserved.

3. Outline
• Reporting in general
• Crystal Reports
– Crystal Reports Server
– Crystal Reports Developer
• Jasper Reports
– JasperServer
– iReport
– Eclipse Plugin
• Crystal vs Jasper
3 © Novell, Inc. All rights reserved.

4. Reporting

5. Reporting
• What should be shown by the report?
• Who will be the audience?
• Content
• Layout
• Access Control
• Distribution
• Determine necessary data
5 © Novell, Inc. All rights reserved.

6. Data
• How to obtain the necessary data?
• Does the Event Source generate the necessary
events?
• Are the events parsed (correctly) by Novell Sentinel ?
®
™
• How is the data represented in a normalized Novell
Sentinel Event?
• Can necessary data be provided by augmenting source
events via the mapping service?
6 © Novell, Inc. All rights reserved.

7. Novell Sentinel Event Schema
®
™
• Initiator: The thing that
caused the event to occur
• Action: The type of
activity that is being
described by the event
• Target: The thing that is
affected by the event
• Observer: The thing that
observed that the event
took place.
7 © Novell, Inc. All rights reserved.

8. XDAS Taxonomy
• Open Group standard for Distributed Audit Service
(XDAS)
• Taxonomy is a classification that is intended to group
events of similar type together to ease reporting and
searching
• Event taxonomy : Classifies the type of activity that the
event describes
• Outcome taxonomy : Classifies the type of outcome or
result that was caused by the event
• Observer taxonomy : Classifies the type of system that
generated the event
8 © Novell, Inc. All rights reserved.

9. Event Taxonomy
• Account Management Events
• Trust Management Events
• Data Item and Resource Element Management Events
• Data Item or Resource Element Content Access Events
• Peer Association Management Events
• User Session Events
• Service and Application Utilization Events
• Service or Application Management Events
• Exceptional Events
• Audit Service Management Events
• Workflow Events
• Attack Events
9 © Novell, Inc. All rights reserved.

10. Best Practices
• You need to understand semantics of events
generated by source devices
• You need to understand how source events are
represented in Novell Sentinel ®
™
(Schema and Taxonomy)
• Spell out what the report is supposed to show
• Start with a mockup of the report
10 © Novell, Inc. All rights reserved.

11. Crystal Reports
Live Demonstration

12. Crystal Reports Outline
• Table View Schema
• Installation
• Demonstration
– Create ODBC Datasource
– Querying the Database
– Displaying data
– Syntax
> Parsing results
– Demonstration: Preview / run report
12 © Novell, Inc. All rights reserved.

13. Crystal Reports
Developer Installation
• Straightforward
– Insert DVD / Mount iso
– Follow instructions to install.
13 © Novell, Inc. All rights reserved.

14. Crystal Reports Syntax
//Assignments //Loops
Local StringVar areaCode; Local NumberVar i;
areaCode := {Customer.Fax} [1 To 3]; Local NumberVar total := 0;
For i := 1 To 5 Do
//if else (
If {Orders.Order Amount} >= 1000 Then total := total + 1
"Insured shipping" );
Else str
"Regular shipping"
End If
//Formula
result = 7 + 2 * 3 - 2
14 © Novell, Inc. All rights reserved.

15. Crystal Reports
Live Demonstration

16. Jasper Reports Outline
• Intro
• Installation
• Demonstration
– Create ODBC Datasource
– Querying the Database
– Displaying data
– Syntax
> Parsing results
– Preview running report
16 © Novell, Inc. All rights reserved.

17. Data Sources in
Novell Sentinel Log Manager
®
™
• There are potentially two data sources for reports
– Event Data – stored on the file system indexed by Lucene
> Lucene query syntax
> extensions to Lucene Queries: “GroupBy” for Top-10 reports
> Lucene query executer for iReport
– Configuration Data – stored in PostgreSQL
> Standard SQL can be used to design the report
• Currently a report can query only one data source at a time
17 © Novell, Inc. All rights reserved.

18. Jasper Reports Installation
• Downloads as an archive tar.gz
• iReport included in installation.
18 © Novell, Inc. All rights reserved.

19. Resources
• Get Novell Sentinel SDK to develop reports
®
™
– http://developer.novell.com/wiki/index.php/Sentinel-sdk
• SDK uses ant as build tool. Eclipse includes ant.
– http://ant.apache.org, http://www.eclipse.org
• iReport – GUI report designer
– http://jasperforge.org/projects/ireport
• Watch recorded Transfer Training
– http://developer.novell.com/wiki/index.php/Reports
• Product Support Foum
– http://forums.novell.com/novell-product-support-forums/sentinel/
19 © Novell, Inc. All rights reserved.

20. Jasper / iReport Demonstration

22. Unpublished Work of Novell, Inc. All Rights Reserved.
This work is an unpublished work and contains confidential, proprietary, and trade secret information of Novell, Inc.
Access to this work is restricted to Novell employees who have a need to know to perform tasks within the scope
of their assignments. No part of this work may be practiced, performed, copied, distributed, revised, modified,
translated, abridged, condensed, expanded, collected, or adapted without the prior written consent of Novell, Inc.
Any use or exploitation of this work without authorization could subject the perpetrator to criminal and civil liability.
General Disclaimer
This document is not to be construed as a promise by any participating company to develop, deliver, or market a
product. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in
making purchasing decisions. Novell, Inc. makes no representations or warranties with respect to the contents
of this document, and specifically disclaims any express or implied warranties of merchantability or fitness for any
particular purpose. The development, release, and timing of features or functionality described for Novell products
remains at the sole discretion of Novell. Further, Novell, Inc. reserves the right to revise this document and to
make changes to its content, at any time, without obligation to notify any person or entity of such revisions or
changes. All Novell marks referenced in this presentation are trademarks or registered trademarks of Novell, Inc.
in the United States and other countries. All third-party trademarks are the property of their respective owners.