topic Re: Custom Reports and Wildcards in General Topics https://live.paloaltonetworks.com/t5/general-topics/custom-reports-and-wildcards/m-p/25072#M18281 <HTML><HEAD></HEAD><BODY><P>Hi...You can try putting those users into a group on your AD/LDAP database, and run the report with filter on user not including the group. As an example:</P><P></P><P>(user.src notin 'pancademo\marketing')</P><P></P><P>Thanks.</P></BODY></HTML> Thu, 07 Jun 2012 18:20:51 GMT rmonvon 2012-06-07T18:20:51Z Custom Reports and Wildcards https://live.paloaltonetworks.com/t5/general-topics/custom-reports-and-wildcards/m-p/25071#M18280 <HTML><HEAD></HEAD><BODY><P>Hello KPers,</P><P></P><P><STRONG>My goal</STRONG>: To create a report of top X users who attempt to access blocked categories.</P><P></P><P><STRONG>My problem</STRONG>: I would like to exclude a set of userids that share a common prefix.</P><P></P><P><STRONG>What I've tried</STRONG>: I've created a URL log custom report based off of action eq block-url and user neq userid*; This does not output my desired results as the users with the common prefix still populate the report.</P><P></P><P>Any suggestions?</P><P></P><P>Many thanks in advance!</P></BODY></HTML> Thu, 07 Jun 2012 17:07:47 GMT https://live.paloaltonetworks.com/t5/general-topics/custom-reports-and-wildcards/m-p/25071#M18280 psouthwick 2012-06-07T17:07:47Z Re: Custom Reports and Wildcards https://live.paloaltonetworks.com/t5/general-topics/custom-reports-and-wildcards/m-p/25072#M18281 <HTML><HEAD></HEAD><BODY><P>Hi...You can try putting those users into a group on your AD/LDAP database, and run the report with filter on user not including the group. As an example:</P><P></P><P>(user.src notin 'pancademo\marketing')</P><P></P><P>Thanks.</P></BODY></HTML> Thu, 07 Jun 2012 18:20:51 GMT https://live.paloaltonetworks.com/t5/general-topics/custom-reports-and-wildcards/m-p/25072#M18281 rmonvon 2012-06-07T18:20:51Z