Part of EventDescription

[RSAAdmin]

Can I make a graphic report, in which X - will be part of the field EventDescription, and Y - interest messages containing X. Ie I have a Linux message starting with "arpwatch: new station ...", "arpwatch: flip flop ..." and so on. I need to display a graph where, for example that 30% of the messages from the New Station, 20% of the Flip Flop and so on. Thanks.

[RSAAdmin]

I don't think you can do that...at least not in enVision itself.  Have you tried just outputting the data as a CSV and trying to do that type of graph/analysis in Excel?

Paul

[RSAAdmin]

Thank you for your reply. No have not tried it, I do it by means of enVision.