Menu
CCMEXEC.COM – Enterprise Mobility
  • Home
  • General
  • Configuration Manager
  • Windows 10
  • Intune
  • GitHub
  • Windows 11
  • About the author
CCMEXEC.COM – Enterprise Mobility

Modifying the default SC Endpoint Protection 2012 report

Posted on April 9, 2014 by Jörgen Nilsson

I got a request from a customer that they want to be able to subscribe to the built in report “Antimalware Activity Report” in Configuration Manager 2012. As this report requires a start date and end date to run the report will be be emailed for the dates that are entered when you create the subscription and not the current date.
Activity report1
Modifying the report to be for the last day or for the last 7 days and remove the Start Date and End Date prompt.

Here is how to do it:

1. Browse to the Configuration Manager 2012 reporting site

2. Under Endpoint Protection, select the “Antimalware Activity Report” and select “edit in report builder”

3.Under Parameters select @StartDate and Edit parameter

4. Change the visibility to “Hidden”
Activity report2 5. In the available values section change to “Get values from a query” with the below settings:

Activity report3

6. Then we do the same for the @EndDate parameter:

Activity report4

Activity report5

7. Then we save the report with a new name like “Anitmalware Activity Report – Last 7 days”

Now when we run the report we are no longer prompted for a Start Date and an End Date, only which device collection the report should be based on.
Activity report6

Then we are done!

If you want to change the interval from 7 days to only include todays activity we can change that as well really easy in the Report Builder.
Under “Datasets” select the “StartEndDates” dataset and edit the query. Change the “-7” in the query to how many days back in time you want the report, for only todays activity set it to “0”.

Activity report7

Then the query looks like this:
select DATEADD(day,0,DATEDIFF(day, 0, GetUTCDate())) as StartDate, DATEADD(day,0,DATEDIFF(day, 0, GetUTCDate())) as EndDate

Then we save report again as for example “Antimalware activity report – todays activity”

I hope this can be useful for more than me

3 thoughts on “Modifying the default SC Endpoint Protection 2012 report”

  1. Chris Scholl says:
    July 7, 2014 at 9:33 pm

    The scheduling functionality of system center reports is missing a key option when setting up a subscription. Everywhere else I’ve used Reporting Services, you have the option to check the “Use Report Default Value” option. You shouldn’t have to hide parameters to get them to use default values. This is a fail on the part of whoever created the interface.

    Reply
  2. Chris Scholl says:
    July 7, 2014 at 9:56 pm

    Update on my previous post. The hacky work-around for this is to hide the parameters on the report, create subscription (you will not be prompted for default dates at this point), go back to report and un-hide parameters. This will force the report to use the default values but still allow you to specify dates when you run the report.

    Reply
  3. James O. says:
    July 14, 2021 at 3:36 pm

    While this is an old topic I wanted to say I found it very helpful. Editing the report and running it works without issue. I created a report subscription for this report and everything seemed fine. The next day I didn’t receive the report so I logged in to check and I saw a status of “The subscription contains parameter values that are not valid.” I checked the properties of the subscription and the only value it was asking for was “collection”. I changed the schedule a bit and attempted to save but was then greeted with the message “Default value or value provided for the report parameter ‘StartDate’ is not a valid value’. Even though this field is hidden and running the report as normal works it still fails when ran through a subscription. Very frustrating and I have no idea how to resolve.

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

My name is Jörgen Nilsson and I work as a Senior Consultant at Onevinn in Malmö, Sweden. This is my blog where I will share tips and stuff for my own and everyone elses use on Enterprise Mobility and Windows related topics.
All code is provided "AS-IS" with no warranties.

Recent Posts

  • Community tools demoed at WPNinjas 2023
  • PowerShell script to keep Personal Teams away in Windows 11
  • Windows 11 Multi-App kiosk – a first look
  • Playing around with Driver Updates in Intune
  • MMUGSE – Summer Meetup 8th of June 2023

©2023 CCMEXEC.COM – Enterprise Mobility | WordPress Theme by Superb Themes
This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish.Accept Reject Read More
Privacy & Cookies Policy

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.
Necessary
Always Enabled
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Non-necessary
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.
SAVE & ACCEPT