07-24-2023 03:51 PM
Hi everyone,
I'm trying to find a way to create a report for Internet bandwidth usage over time.
we are using PA850 version 10.1.9h3
I know I can see live statistics on Network - QOS, but I need a report for the last 7 or 30 days.
It can be daily average.
Thank you all for the help.
08-11-2023 05:42 AM
Correct, the report when analyzing a large amount of data will take plenty of time to generate properly. Can't really fix that one, the firewall simply needs to look at a lot of data to generate the report properly.
Your original question didn't mention that you wanted to make any sort of exception for business hours or exclude certain traffic from the report, simply that you wanted bandwidth statistics. If you want to exclude certain traffic you can just update the query that you're using to exclude the traffic in question.
As for wanting to exclude certain times of day, that report gets harder to actually generate. Either you'll need to schedule the report so that it can run daily at a desired interval so you can use a filter like (receive_time in last-12-hrs) and only capture the traffic you want, or you'll need to utilize the API and a script so that you can run a daily report with something like ((receive_time geq '2023/08/10 05:00:00') and (receive_time leq '2023/08/10 20:00:00')) to match your desired business hours.
Setting up a query to exclude the backup traffic that you don't appear to want included would be the best path forward in my mind instead of trying to target business hours.
07-25-2023 06:27 AM
Assuming that you have a "internet" zone, whether that be the default untrust zone or something else, you can build this report easily by targeting the zone. You would want to use the detailed traffic logs, set whatever time frame you want, and then ensure that you have selected at least Destination Zone and Bytes. Set the query to (zone.dst eq untrust) or whatever your internet zone is named.
The generated report would show you a general usage report for the selected time period. You can include the Source Zone as a selected column if you wanted, you would just have to aggregate the values if you wanted a "total" if that makes sense.
08-10-2023 04:15 PM - edited 08-10-2023 04:16 PM
Hi, thank you and sorry for the late reply, those reports are very heavy and takes time to see more than 7 days.
it will show me the amount of data is being transferred each day on 7 days but I can't assume it being done during business hours if I consider the backup to cloud that we are using. Thank you for the respond.
08-11-2023 05:42 AM
Correct, the report when analyzing a large amount of data will take plenty of time to generate properly. Can't really fix that one, the firewall simply needs to look at a lot of data to generate the report properly.
Your original question didn't mention that you wanted to make any sort of exception for business hours or exclude certain traffic from the report, simply that you wanted bandwidth statistics. If you want to exclude certain traffic you can just update the query that you're using to exclude the traffic in question.
As for wanting to exclude certain times of day, that report gets harder to actually generate. Either you'll need to schedule the report so that it can run daily at a desired interval so you can use a filter like (receive_time in last-12-hrs) and only capture the traffic you want, or you'll need to utilize the API and a script so that you can run a daily report with something like ((receive_time geq '2023/08/10 05:00:00') and (receive_time leq '2023/08/10 20:00:00')) to match your desired business hours.
Setting up a query to exclude the backup traffic that you don't appear to want included would be the best path forward in my mind instead of trying to target business hours.
08-17-2023 10:21 AM
Hi, thank you for the answer, sorry for the late reply.
Looks like those reports are heavy on my PA850
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
