A method and apparatus for real-time, multi-dimensional reporting and analyzing of data on application level activity and other user information on a mobile data network. A report manager communicates with a data manager to develop and test real-time reports about aggregate and user-level network usage. The data manager provides a database of non-aggregate, user-specific event data and a set of tables specifying combinations of monitored variables satisfying a set of defined reports. The report manager comprises a report generation module, which receives operator instructions for aggregate usage information. The report module determines whether the requested information can be satisfied by combinations of monitored aggregate variables, or whether it must be retrieved from a non-aggregate, user-specific, event data database. Furthermore, the report module is responsive to operator instructions to add a test report to the set of defined real-time reports.