Network Monitor Report Displays Partial Data When Selecting Source or Destination
9387
Created On 07/06/20 04:46 AM - Last Modified 09/27/20 21:10 PM
Symptom
When selecting Source or Destination IP address as the type of item, Network Monitor report (Monitor > App Scope > Network Monitor) displays only partial data as below.
However, the report does display all data as expected when you instead select Application or Application Category for a large data set.
Environment
- NGFW
- Any current PAN-OS version
Cause
This happens if the report includes a large number of source or destination IP addresses and usernames.
By our design, the max keys for a report (as same the entries of a report) is limited 100K, due to memory consumption concerns.
As the result, some of data will not be presented in the report.
Resolution
Use ACC monitor and select "Custom" as time-range to check the data for each day. To use short time-range will be more accurate.