How to Create a Custom Report for Traffic Log with Non-US Destinations

How to Create a Custom Report for Traffic Log with Non-US Destinations

20971
Created On 09/27/18 07:06 AM - Last Modified 06/01/23 08:13 AM


Resolution


Overview

This document describes how to create a query to exclude non-US destinations from a traffic log custom report.

 

Steps

  1. Go to Monitor > Manage Custom Reports
  2. Click Add.
  3. For the Database, select "Traffic Log" under the "Detailed Logs (Slower)" section in the drop-down.
  4. Select columns as desired.
  5. In the Query Builder, include the following query: dstloc neq US
    Note: The Destination Country attribute is not available in the Query Builder, so the query must be entered manually. Please refer to the example.

 

Examples

With the Query Builder configured to exclude US:

 

With the Query Builder left empty (no filters specified):

 

owner: kadak



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm7oCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language