Resource Reports group calculating wrongly?

[ardi_80_ironport]

I'm using a regular expression to filter data for reports:

(( date_time > '20/Apr/2009 23:59:59') and ( date_time <= '27/Apr/2009 23:59:59'))

When this filter is used for reports under group Resource, it show a value of total 57.55 G . When used for other reports like overview or Date reports it shows 31.87 for total. I cannot explain this difference and i do think the problem is in group Resource reports. Anyone facing this problem or has any idea?

I'm using Sawmill 7.2.15 to extract data

[jowolfer]

ardi_80,

I'm not sure what would be causing this discrepancy.

The first thing I recommend is upgrading to Sawmill for IronPort 7.3. This is the latest build available and has quite a few changes and optimizations to it.

After upgrading, if you are still experiencing the issue, I recommend filing a support ticket to have the specific data looked into further.