<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Custom Report in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/custom-report/m-p/266541#M74446</link>
    <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/100050"&gt;@JonHill&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;The built-in SaaS report can only be restricted to user groups to the best of my knowledge, which may work for what you are doing or it may not. You could build this with a custom report if you did something of the following:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Which generates a report such as below:&lt;/P&gt;&lt;PRE&gt;      &amp;lt;entry name="Weekly Application Statistics"&amp;gt;
        &amp;lt;type&amp;gt;
          &amp;lt;traffic&amp;gt;
            &amp;lt;sortby&amp;gt;bytes&amp;lt;/sortby&amp;gt;
            &amp;lt;aggregate-by&amp;gt;
              &amp;lt;member&amp;gt;app&amp;lt;/member&amp;gt;
              &amp;lt;member&amp;gt;category-of-app&amp;lt;/member&amp;gt;
              &amp;lt;member&amp;gt;subcategory-of-app&amp;lt;/member&amp;gt;
              &amp;lt;member&amp;gt;src&amp;lt;/member&amp;gt;
              &amp;lt;member&amp;gt;action&amp;lt;/member&amp;gt;
            &amp;lt;/aggregate-by&amp;gt;
            &amp;lt;values&amp;gt;
              &amp;lt;member&amp;gt;bytes&amp;lt;/member&amp;gt;
              &amp;lt;member&amp;gt;bytes_sent&amp;lt;/member&amp;gt;
              &amp;lt;member&amp;gt;repeatcnt&amp;lt;/member&amp;gt;
              &amp;lt;member&amp;gt;bytes_received&amp;lt;/member&amp;gt;
            &amp;lt;/values&amp;gt;
          &amp;lt;/traffic&amp;gt;
        &amp;lt;/type&amp;gt;
        &amp;lt;period&amp;gt;last-calendar-day&amp;lt;/period&amp;gt;
        &amp;lt;topn&amp;gt;250&amp;lt;/topn&amp;gt;
        &amp;lt;topm&amp;gt;50&amp;lt;/topm&amp;gt;
        &amp;lt;caption&amp;gt;Weekly Application Statistics&amp;lt;/caption&amp;gt;
        &amp;lt;frequency&amp;gt;daily&amp;lt;/frequency&amp;gt;
        &amp;lt;query&amp;gt;(addr in 10.191.16.30)&amp;lt;/query&amp;gt;
      &amp;lt;/entry&amp;gt;&lt;/PRE&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screen Shot 2019-06-04 at 6.41.44 PM.png" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/20317iEFD53670872BAF98/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="Screen Shot 2019-06-04 at 6.41.44 PM.png" alt="Screen Shot 2019-06-04 at 6.41.44 PM.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Just a fair warning, this isn't a pretty report when you make it like this, but it will give you the same information.&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Tue, 04 Jun 2019 23:42:45 GMT</pubDate>
    <dc:creator>BPry</dc:creator>
    <dc:date>2019-06-04T23:42:45Z</dc:date>
    <item>
      <title>Custom Report</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/custom-report/m-p/265177#M74430</link>
      <description>We deployed our 5520 recently between our LAN and MPLS connections and the reports from Panorama are great but I'd like to be able to create a custom SAAS report with specific source - destination traffic excluded from the report. Is this possible and if so how do I start building the report? Thanks Jon</description>
      <pubDate>Mon, 03 Jun 2019 09:08:01 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/custom-report/m-p/265177#M74430</guid>
      <dc:creator>JonHill</dc:creator>
      <dc:date>2019-06-03T09:08:01Z</dc:date>
    </item>
    <item>
      <title>Re: Custom Report</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/custom-report/m-p/266541#M74446</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/100050"&gt;@JonHill&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;The built-in SaaS report can only be restricted to user groups to the best of my knowledge, which may work for what you are doing or it may not. You could build this with a custom report if you did something of the following:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Which generates a report such as below:&lt;/P&gt;&lt;PRE&gt;      &amp;lt;entry name="Weekly Application Statistics"&amp;gt;
        &amp;lt;type&amp;gt;
          &amp;lt;traffic&amp;gt;
            &amp;lt;sortby&amp;gt;bytes&amp;lt;/sortby&amp;gt;
            &amp;lt;aggregate-by&amp;gt;
              &amp;lt;member&amp;gt;app&amp;lt;/member&amp;gt;
              &amp;lt;member&amp;gt;category-of-app&amp;lt;/member&amp;gt;
              &amp;lt;member&amp;gt;subcategory-of-app&amp;lt;/member&amp;gt;
              &amp;lt;member&amp;gt;src&amp;lt;/member&amp;gt;
              &amp;lt;member&amp;gt;action&amp;lt;/member&amp;gt;
            &amp;lt;/aggregate-by&amp;gt;
            &amp;lt;values&amp;gt;
              &amp;lt;member&amp;gt;bytes&amp;lt;/member&amp;gt;
              &amp;lt;member&amp;gt;bytes_sent&amp;lt;/member&amp;gt;
              &amp;lt;member&amp;gt;repeatcnt&amp;lt;/member&amp;gt;
              &amp;lt;member&amp;gt;bytes_received&amp;lt;/member&amp;gt;
            &amp;lt;/values&amp;gt;
          &amp;lt;/traffic&amp;gt;
        &amp;lt;/type&amp;gt;
        &amp;lt;period&amp;gt;last-calendar-day&amp;lt;/period&amp;gt;
        &amp;lt;topn&amp;gt;250&amp;lt;/topn&amp;gt;
        &amp;lt;topm&amp;gt;50&amp;lt;/topm&amp;gt;
        &amp;lt;caption&amp;gt;Weekly Application Statistics&amp;lt;/caption&amp;gt;
        &amp;lt;frequency&amp;gt;daily&amp;lt;/frequency&amp;gt;
        &amp;lt;query&amp;gt;(addr in 10.191.16.30)&amp;lt;/query&amp;gt;
      &amp;lt;/entry&amp;gt;&lt;/PRE&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screen Shot 2019-06-04 at 6.41.44 PM.png" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/20317iEFD53670872BAF98/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="Screen Shot 2019-06-04 at 6.41.44 PM.png" alt="Screen Shot 2019-06-04 at 6.41.44 PM.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Just a fair warning, this isn't a pretty report when you make it like this, but it will give you the same information.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 04 Jun 2019 23:42:45 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/custom-report/m-p/266541#M74446</guid>
      <dc:creator>BPry</dc:creator>
      <dc:date>2019-06-04T23:42:45Z</dc:date>
    </item>
  </channel>
</rss>

