02-13-2017 08:54 AM
Hi Folks,
Trying to run ACC report for the particular time between (13:30 - and 14:00) and not sure if that is the right output:
Traffic logs show activities.
Thx,
Myky
02-13-2017 09:10 AM
You didn't happen to failover to another unit did you?
02-14-2017 06:40 AM - edited 02-14-2017 06:44 AM
@TranceforLife Review the traffic log (Monitor -> Logs -> Traffics), my guess is very few traffic log entries (Under the column for receive Time) between 13:05 to 13:45, and you will find number of traffic log records with those amount of bytes counts around 14:00 time frame..
I have seen this before and I never got a good explaination from TAC/SE/PM about this. My own conclusion is ACC only graph when a session is closed and the policy is set to log, therefore ACC can generate the report every 15 minutes.
so, if I have number of sessions with duration say for example longer than 30 minutes or even longer, you will not see that in the source|destination ip activity graph assoicated with that ip address until those sessions are ended.
02-14-2017 07:26 AM
Thanks All. l will check your suggestions/advices and get back here!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
