panorama custom reports for *. query

[ta185020]

Hi All,

Need help with Panorama Reporting.

1. our orgnization has departments, such as Finance, and users in Finance are
setup as fin.user1, fin.user2, and so on. We need to get report for all users
with the prefix "fin.*" , but I dont seem to be able to get this done in Panorama.
Is this a feature request, or is there a way of doing this. Please advise.

2. I have a total of about 1000 + users on the network, and in Panorama I can
only query for top 500. Even in the custom report, I am not able to query
anything more than 500, for example, it says Bytes, and top 500, I need to query
for example Bytes, for all the 1000 + users, kindly advise how can this be done
in one query.

Rgds,

Tauseef Ahmed

[ppatel]

Hi Tauseef

If all the users are belonging to a group in the AD you may use the filter to retrieve their activities-

Please see the attachement

Filter type:- User --- in --- Domain\ABC

Also you can try using subnets for the users belonging to users.

For example:- addr in 10.10.0.0/24 addresses for a specific group of users

I am not sure whether or how  you can query for more than 1000+ users at a time 

Need to research about it.

Thanks

Parth