Cli command to show real time traffic of specific user

[Jafar_Hussain]

Hello All,

Is there any way to check how we can identify the user consuming huge bandwidth in real-time. Using Palo alto dashboard we can query the user high bandwidth consumption but it will be after the session is ended. it will not be on real-time.

thanks.

[MP18]

Live user session can be seen in session browser.

Also you can see the live Bandwidth traffic in Qos.

Also it will show you source user and bytes

[Jafar_Hussain]

@MP18  thanks for your reply, if the session is ended so is there any way to know via CLI command, which user consumes more bandwidth.

[MP18]

You need to Run the custom reports to see which user consumes more bandwidth.

[BPry · Accepted solution]

@Jafar_Hussain,

show report predefined name equal top-users will give you the top-users report in the CLI. You can limit that to a specific timeframe by specifying the start-time and end-time like so show report predefined start-time equal 2019/12/23@08:00:00 end-time equal 2019/12/23@08:45:00 name equal top-users

If you need a custom report for this you can run that command in the CLI by building it with the show report custom command and feeding in the proper values

[MP18]

Thanks BPry its always good to learn something new from you.

[Jafar_Hussain]

@BPry 

Thanks. appreciate your response.