ACC and filtering App Category or Sub Category

[rickyboone]

I couldn't find an answer after searching for a bit, so I thought I'd ask the community.

In the ACC tab within the PANOS web UI, if I select an application in the report, within the Application Information section that appears I get links for the App Category and App Sub Category.  I can then drop the filter for the Application, and work with the App Category or App Sub Category filters... which apparently aren't accessible through Add Filters.

Does anyone know of a way to enter a filter for even just the App Category through Add Filters in ACC, or is this the normal workflow?  I would think this would be a good feature (as well as being able to filter the app category within the Monitor tab), but want to be sure I'm just not missing something.

[rickyboone]

In addition to App Category and App Sub Category, it looks like the ACC is able to filter based on App Technology (also not in the dropdown).  The only thing that is missing is App Characteristic, then we'd have the full set of filter values from the App-ID list.

[UhMayYeah · Accepted solution]

Currently, the options available in the Drop-Down should be used as Primary Filters in ACC ,you can then drill-down using the sub-categories ,as you have  aptly discovered.

Options to get ACC o/p based on sub-categories can come in handy. Please discuss the options for filing a Feature Request with your SE.

[rickyboone]

Okay, that's what I thought, but wanted to be sure I wasn't missing something or had something mis-configured.  I agree that it would come in handy.

One thing to note, I was able to find the attribute names for searching categories and sub-categories within the logs.  They're just not visible as options in the Add Filter menu.  App Category is category-of-app, and App Sub Category is subcategory-of-app.

( category-of-app eq value )

( subcategory-of-app eq value )

Thanks for the reply!