What data does ACC Threat Activity uses for its graphs?
2340
Created On 05/11/22 01:17 AM - Last Modified 03/11/25 22:39 PM
Question
What data does ACC Threat Activity uses for its graphs?
Environment
- Palo Alto Firewalls
- Supported PAN-OS
- Application Command Center (ACC)
Answer
- The traffic/threat summary is a roll up of all the traffic/threat logs summarized every 15 minutes.
- The hourly, daily, and weekly summaries are roll ups of the 15 minute summaries on an hourly basis and a roll up of the hourly summaries on a daily basis and a roll up of the daily summaries on a weekly basis.
- The summary database are used on the ACC report.
- When running ACC Threat Activity Bar Graph (the default) for a calendar day, it will use hourly or daily threat summary data.
- When running ACC Threat Activity Column Graph, it will only use the 15 minute threat summary instead.