<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic User activity report Query in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/user-activity-report-query/m-p/203175#M59882</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I go to&amp;nbsp;ACC tab --&amp;gt;Onleft side select the time frame --&amp;gt; Network Activity --&amp;gt;User Activity --&amp;gt; Export to PDF&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;DIV&gt;1) User activity report when it is pulled it shows Source User and destination User. What is that destination user means?&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;2)Under Destination IP activity tab, once the report is pulled it shows the destination IP's but we want the destination URL's to be shown. Can we achive this?&lt;/DIV&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks in advance.&lt;/P&gt;</description>
    <pubDate>Fri, 02 Mar 2018 00:35:58 GMT</pubDate>
    <dc:creator>Farzana</dc:creator>
    <dc:date>2018-03-02T00:35:58Z</dc:date>
    <item>
      <title>User activity report Query</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/user-activity-report-query/m-p/203175#M59882</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I go to&amp;nbsp;ACC tab --&amp;gt;Onleft side select the time frame --&amp;gt; Network Activity --&amp;gt;User Activity --&amp;gt; Export to PDF&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;DIV&gt;1) User activity report when it is pulled it shows Source User and destination User. What is that destination user means?&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;2)Under Destination IP activity tab, once the report is pulled it shows the destination IP's but we want the destination URL's to be shown. Can we achive this?&lt;/DIV&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks in advance.&lt;/P&gt;</description>
      <pubDate>Fri, 02 Mar 2018 00:35:58 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/user-activity-report-query/m-p/203175#M59882</guid>
      <dc:creator>Farzana</dc:creator>
      <dc:date>2018-03-02T00:35:58Z</dc:date>
    </item>
    <item>
      <title>Re: User activity report Query</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/user-activity-report-query/m-p/203243#M59888</link>
      <description>&lt;P&gt;hi &lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/45418"&gt;@Farzana&lt;/a&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;1. If you have user-IP mapping enabled in your environment, both IP addresses (source and destination) could have a user logged in, for example an IT person doing a remote assist connection to a GP user that needs help. In this case you could have both a source and destination user&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;2. you need to select the 'URLs' button at the top of the User Activity widget to see the URLs.&amp;nbsp; The ACC export is also less detailed than the &lt;STRONG&gt;Monitor &amp;gt; PDF reports &amp;gt; User Activity Report&lt;/STRONG&gt;, you could give that a try instead of the ACC one to get more details&lt;/P&gt;</description>
      <pubDate>Fri, 02 Mar 2018 10:16:39 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/user-activity-report-query/m-p/203243#M59888</guid>
      <dc:creator>reaper</dc:creator>
      <dc:date>2018-03-02T10:16:39Z</dc:date>
    </item>
  </channel>
</rss>

