<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Modified XML API for Top Users last 30days in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/modified-xml-api-for-top-users-last-30days/m-p/568689#M114752</link>
    <description>&lt;P&gt;Hi &lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/225107"&gt;@Fariq_Zaidi&lt;/a&gt; ,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Not sure about the XML API syntax for top users last 30 days.&lt;/P&gt;
&lt;P&gt;That said, how about creating a custom report that gives you that exact information and then calling this custom report using XML API ?&lt;BR /&gt;&lt;BR /&gt;/api/?type=report&amp;amp;async=yes&amp;amp;reporttype=custom&amp;amp;reportname=top-users-custom&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Kind regards,&lt;/P&gt;
&lt;P&gt;-Kim.&lt;/P&gt;</description>
    <pubDate>Wed, 06 Dec 2023 14:18:34 GMT</pubDate>
    <dc:creator>kiwi</dc:creator>
    <dc:date>2023-12-06T14:18:34Z</dc:date>
    <item>
      <title>Modified XML API for Top Users last 30days</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/modified-xml-api-for-top-users-last-30days/m-p/568383#M114711</link>
      <description>&lt;P&gt;Hi Support,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;We want to get top all users for last 30 days&amp;nbsp;&amp;nbsp;using XML API, how we get it?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;This is&amp;nbsp;XML API&amp;nbsp;to get top 10 users (&lt;STRONG&gt;Worked&lt;/STRONG&gt;&lt;span class="lia-unicode-emoji" title=":disappointed_face:"&gt;😞&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;lt;type&amp;gt;&amp;lt;panorama-trsum&amp;gt;&amp;lt;sortby&amp;gt;sessions&amp;lt;/sortby&amp;gt;&amp;lt;group-by&amp;gt;srcuser&amp;lt;/group-by&amp;gt;&amp;lt;aggregate-by&amp;gt;&amp;lt;member&amp;gt;src&amp;lt;/member&amp;gt;&amp;lt;member&amp;gt;app&amp;lt;/member&amp;gt;&amp;lt;/aggregate-by&amp;gt;&amp;lt;values&amp;gt;&amp;lt;member&amp;gt;sessions&amp;lt;/member&amp;gt;&amp;lt;member&amp;gt;bytes&amp;lt;/member&amp;gt;&amp;lt;member&amp;gt;nthreats&amp;lt;/member&amp;gt;&amp;lt;/values&amp;gt;&amp;lt;/panorama-trsum&amp;gt;&amp;lt;/type&amp;gt;&amp;lt;period&amp;gt;last-30-days/period&amp;gt;&amp;lt;&amp;lt;topn&amp;gt;10&amp;lt;/topn&amp;gt;&amp;lt;topm&amp;gt;&amp;lt;count&amp;gt;30&amp;lt;/count&amp;gt;&amp;lt;/topm&amp;gt;&amp;lt;caption&amp;gt;top-10-users-last-30-days&amp;lt;/caption&amp;gt;&amp;lt;description&amp;gt;Traffic Reports&amp;lt;/description&amp;gt;&amp;lt;device-group&amp;gt;{0}&amp;lt;/device-group&amp;gt;&amp;lt;query&amp;gt;(device-group eq '" . $deviceGroup . "') AND ( (srcuser neq '') )&amp;lt;/query&amp;gt;&amp;lt;runnow&amp;gt;yes&amp;lt;/runnow&amp;gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;This is the&amp;nbsp;XML API&amp;nbsp;for all users that I get from ChatGPT but it &lt;STRONG&gt;didn't work&lt;/STRONG&gt;:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;lt;type&amp;gt;&amp;lt;panorama-trsum&amp;gt;&amp;lt;sortby&amp;gt;sessions&amp;lt;/sortby&amp;gt;&amp;lt;group-by&amp;gt;srcuser&amp;lt;/group-by&amp;gt;&amp;lt;aggregate-by&amp;gt;&amp;lt;member&amp;gt;src&amp;lt;/member&amp;gt;&amp;lt;member&amp;gt;app&amp;lt;/member&amp;gt;&amp;lt;/aggregate-by&amp;gt;&amp;lt;values&amp;gt;&amp;lt;member&amp;gt;sessions&amp;lt;/member&amp;gt;&amp;lt;member&amp;gt;bytes&amp;lt;/member&amp;gt;&amp;lt;member&amp;gt;nthreats&amp;lt;/member&amp;gt;&amp;lt;/values&amp;gt;&amp;lt;/panorama-trsum&amp;gt;&amp;lt;/type&amp;gt;&amp;lt;period&amp;gt;last-30-days&amp;lt;/period&amp;gt;&amp;lt;caption&amp;gt;all-users-last-30-days&amp;lt;/caption&amp;gt;&amp;lt;description&amp;gt;TrafficReportsforAllUsers&amp;lt;/description&amp;gt;&amp;lt;device-group&amp;gt;{0}&amp;lt;/device-group&amp;gt;&amp;lt;query&amp;gt;(device-group eq '" . $deviceGroup . "') AND ( (srcuser neq '') )&amp;lt;/query&amp;gt;&amp;lt;runnow&amp;gt;yes&amp;lt;/runnow&amp;gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;And this is the&amp;nbsp;XML API&amp;nbsp;I get from XML API documentation:&amp;nbsp;&lt;/P&gt;
&lt;P&gt;/api/?type=report&amp;amp;async=yes&amp;amp;reporttype=predefined&amp;amp;reportname=top-users&lt;/P&gt;
&lt;P&gt;this API only for 1 day.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I tried to modified the XML above, add start and end date for 1 month but it still only get for 1 day.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;How to modified the XML API to get for last 30 days using API above?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Please advise&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;thank you&lt;/P&gt;</description>
      <pubDate>Tue, 05 Dec 2023 09:39:23 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/modified-xml-api-for-top-users-last-30days/m-p/568383#M114711</guid>
      <dc:creator>Fariq_Zaidi</dc:creator>
      <dc:date>2023-12-05T09:39:23Z</dc:date>
    </item>
    <item>
      <title>Re: Modified XML API for Top Users last 30days</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/modified-xml-api-for-top-users-last-30days/m-p/568689#M114752</link>
      <description>&lt;P&gt;Hi &lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/225107"&gt;@Fariq_Zaidi&lt;/a&gt; ,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Not sure about the XML API syntax for top users last 30 days.&lt;/P&gt;
&lt;P&gt;That said, how about creating a custom report that gives you that exact information and then calling this custom report using XML API ?&lt;BR /&gt;&lt;BR /&gt;/api/?type=report&amp;amp;async=yes&amp;amp;reporttype=custom&amp;amp;reportname=top-users-custom&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Kind regards,&lt;/P&gt;
&lt;P&gt;-Kim.&lt;/P&gt;</description>
      <pubDate>Wed, 06 Dec 2023 14:18:34 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/modified-xml-api-for-top-users-last-30days/m-p/568689#M114752</guid>
      <dc:creator>kiwi</dc:creator>
      <dc:date>2023-12-06T14:18:34Z</dc:date>
    </item>
  </channel>
</rss>

