topic Re: User Activity Reports in General Topics

User Activity Reports

brb — Fri, 01 Nov 2013 16:20:39 GMT

I really need some help in the correct process of running a user activity report. I have a request to pull the last 30 days of internet activity on a particular user. Every time I attempt this, I get strange results. Either the info only goes back 3 days, or it only summarizes based on application category with no other info.

Basically, I want to run a report for a specific time period, and have at least a summery of a users web history.

Can anyone please help me understand the right way to do this?

Many thanks in advance.

Re: User Activity Reports

jteetsel — Sat, 02 Nov 2013 00:02:07 GMT

Hello, how far back do your traffic logs go? Under Monitor > Traffic use the below filter and adjust the date to find out how far back they go:

( receive_time leq '2013/11/01 15:46:17' )

leq = less than or equal to

You can also run the below command from the command line:

show log traffic direction equal forward

This will show you the oldest log entry

Re: User Activity Reports

_slv_ — Sat, 02 Nov 2013 19:38:56 GMT

What version of PAN are You use? 5.0.6/7 has problems with reports.

Of course You must check how much traffic logs do You have. Please consider that every Your policy must log traffic, maybe You need change some policy setting to get some more

free space for important data..

Regards

SLawek

Re: User Activity Reports

_slv_ — Sat, 02 Nov 2013 19:42:45 GMT

I also played with similar problem, maybe this topic will be useful for You Policy with "Log at Session Start" option - how to find it?

Re: User Activity Reports

Phoenix — Mon, 04 Nov 2013 22:37:06 GMT

Hello Brb,

I see per your need you are looking for getting statistics for a user and their web access results. Yes you can do this in User Activity report but I have another option through Custom Reports. Here there is more flexibility to select details.

I have highlighted all that is needed per your need. Once this is set you can schedule this report too to get info daily or run it whenever it is needed.

Hope this helps !