Scheduled Log Export based on custom queries

[anishuthuman]

Is there any option to schedule custom traffic reports based on custom queries and to get it exported automatically .?

Currently, we are exporting the traffic logs manually from  Monitor > Logs >Traffic and pasting the queries ( some of the sample queries is mentioned below) in the search bar (apply filter) and export as csv file .  

We have many queries like below to export ..Kindly provide any option for scheduled export ..

example of some custom query is given below :

(receive_time geq '2022/01/12') and (receive_time leq '2022/01/13') and (( natdst eq 172.22.123.12 ) or ( addr.dst in 172.22.123.12 ))

(receive_time geq '2022/01/12') and (receive_time leq '2022/01/13') and ( addr.dst in 172.22.114.10 )

(receive_time geq '2022/01/12') and (receive_time leq '2022/01/13') and (( natdst eq 172.22.113.19 ) or ( addr.dst in 172.22.113.19 ))

[kiwi]

Hi @anishuthuman ,

You can create a custom report (Monitor > Manage Custom Reports) and add your filters or create new ones using the 'query builder':

Once created, you can add it to a report group (Monitor > PDF Reports > Report Group) and add the report group to an Email Scheduler (Monitor > PDF Reports > Email Scheduler).

Or if you don't want to create an email scheduler for it you can, once it's created and ran for a first time check it under 'Monitor > Reports'

Config Custom Reports 

Hope this helps,

-Kiwi.