Palo Alto Networks Knowledgebase: How to Create Custom Report to Show The Least Used Rules in Security Policies

How to Create Custom Report to Show The Least Used Rules in Security Policies

4428
Created On 02/08/19 00:01 AM - Last Updated 02/08/19 00:01 AM
Reporting and Logging
Resolution

To create a custom report to see the least used rules based on the number of bytes/packets, go through the following steps.

 

Steps

  1. Create one custom report from Monitor > Manage Custom Reports and click on Add.
  2. Load Template and select “Top security rules”.
  3. Set Database to Traffic Log.
  4. The Selected Columns on the right must contain "Rules", "Bytes" and "Count" only.
  5. Set Time Frame as desired.
  6. Sort by “Bytes” or “Packets”.  All other options can be left as is.

rule count custom report.png

  1. You can schedule the report or hit “Run now” to get the report instantly.
  2. The output of the report should be similar to the one below.

custom report output.png

owner: aciobanu



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClcgCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language