I have a Panorama 9.0 managing various 9.0 firewalls. If i generate a simple custom report of total send/receive bytes for the top 25 destination IPs, i find the results vary with time. For example, if i run the report for the previous 24 hours, and do this each day for a week, i can merge and sum the totals in Excel. If i run the same custom report as a single job for the entire week, the figures vary considerably from the merged report. This happens whether i use the summary traffic database or detailed database.
I have seen the same behaviour for top source IPs and top applications. The totals for bytes do not agree.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!