Events Group By User/IP?

The reporting add-on seems to be for log data export and print-outs.

I was wanting to view the event logs in a more meaningful way. Not just by event number, Event date/time and event trigger (userid/IP), but be able to see an aggregated view where you can collate events by USER, IP, Event type.

So I could look at dashboard and see a log data grid table and collapse/expand log detail. That way I could for example see IP # xx.xx.xxx.xx had 5 events which may be high and draws my attention to potential threat/issue.

RE: Search Add-on … I may not know which user or IP I want to search for so this may not be ideal for my situation.

If you want a mockup of what I mean, let me know.

—–

As to my confusing comment: “do this grouping work external to the plug-in”?

This relates to my interpretation of the reporting add-on and what it gives in the way of features. I assumed I would export log data as TAB/CSV delimited and use pivot tables in excel to group events by IP/user etc

Naturally this would mean (due to the effort involved) I would miss out in seeing/stopping hacking early, as viewing the ‘group by’ data online at dashboard would be more convenient and frequent to offline data analysis.

Hope I have done a better job of explaining my use case.

cheers Kat