topic Re: Top Talker/Conversation in Paloalto 5220 in General Topics

Top Talker/Conversation in Paloalto 5220

KumarRamalinga — Thu, 16 Aug 2018 19:51:44 GMT

Hello All - How to generate Top Talker report for a particular period. The Report should contain as below

Source IP address

Destination IP address

Bytes

Services/TCP UDP Port numbers

These are the minumum filed should be in the Report. Can you pleae help to know who to achieve this. Roughly i tried using ACC module, but i couldnt achieve. I get Top sources seperately and Top destination seperately but not combined as a conversation

Re: Top Talker/Conversation in Paloalto 5220

Remo — Thu, 16 Aug 2018 21:39:33 GMT

Hi @KumarRamalinga

With a custom report you will get at least close to that what you need.

There you should add the columns you need, set the group by field to source IP and the sort by to bytes. This should generate a report with your requirements.

Re: Top Talker/Conversation in Paloalto 5220

reaper — Wed, 22 Aug 2018 08:54:36 GMT

hi @KumarRamalinga

Please have a look at this tutorial video on how to create custom reports: https://live.paloaltonetworks.com/t5/Tutorials/Getting-Started-Custom-Reports/ta-p/69951