topic ACC Not displaying drop-down boxes when filtering is applied in General Topics

ACC Not displaying drop-down boxes when filtering is applied

michael.gentile — Wed, 28 Mar 2012 20:16:54 GMT

We have an issue where the drop-down boxes in the ACC disappear when filtering is applied.

For instance, when I go into the ACC, I see all my data.

1) I click on the web-browsing application to see the top users. The information displays properly.

2) Then I click on a specific user to see that user's activity.

I'd like to see a list of the top URLs this user is accessing, but the drop-down in the URL Filtering section has now disappeared, and all I can view is the categories and not the actual URLs. Even if I remove the filtering criteria, the drop-down boxes are still gone, and I am forced to click back on the ACC tab just to refresh the page to get them back.

For some reason this happens when certain filtering criteria are applied, and I am only able to see a subset of the data I want to see.

Does anyone else have this same issue? Do we know if Palo Alto is aware?

Re: ACC Not displaying drop-down boxes when filtering is applied

Jamiefitzgerald — Wed, 28 Mar 2012 20:35:53 GMT

The behavior you described is working as designed. The workflow that you are looking to achieve can be accomplished by looking at the top destinations or by clicking on the link at the top of the ACC page to jump to the URL logs. See the attached images...

Re: ACC Not displaying drop-down boxes when filtering is applied

michael.gentile — Wed, 28 Mar 2012 20:39:14 GMT

Why is it not possible to see the URL logs when drilling down to a specific user? The destination ip, even with reverse lookup, is not enough information. I understand the logs can be seen as well. I just don't understand why this can't be implemented on the ACC page. When I allow management to view the ACC, that's the first thing they want to do and they are very disappointed when they can't.

Re: ACC Not displaying drop-down boxes when filtering is applied

Jamiefitzgerald — Wed, 28 Mar 2012 20:49:18 GMT

Today, this is seen as detailed information that is better served from the detailed logs. This could be a valid feature request to add the URL information to the ACC to a future release. Please contact your SE and ask them to file a feature request on the behalf of your company.