Top Talker/Conversation in Paloalto 5220

cancel
Showing results for 
Search instead for 
Did you mean: 

Top Talker/Conversation in Paloalto 5220

L2 Linker

Hello All - How to generate Top Talker report for a particular period. The Report should contain as below

 

Source IP address

Destination IP address

Bytes

Services/TCP UDP Port numbers

 

These are the minumum filed should be in the Report. Can you pleae help to know who to achieve this. Roughly i tried using ACC module, but i couldnt achieve. I get Top sources seperately and Top destination seperately but not combined as a conversation

1 ACCEPTED SOLUTION

Accepted Solutions

Cyber Elite
Cyber Elite

hi @KumarRamalinga

 

Please have a look at this tutorial video on how to create custom reports: https://live.paloaltonetworks.com/t5/Tutorials/Getting-Started-Custom-Reports/ta-p/69951

Tom Piens
PANgurus - (co)managed services and consultancy

View solution in original post

2 REPLIES 2

Cyber Elite
Cyber Elite

Hi @KumarRamalinga

 

With a custom report you will get at least close to that what you need.

There you should add the columns you need, set the group by field to source IP and the sort by to bytes. This should generate a report with your requirements.

Cyber Elite
Cyber Elite

hi @KumarRamalinga

 

Please have a look at this tutorial video on how to create custom reports: https://live.paloaltonetworks.com/t5/Tutorials/Getting-Started-Custom-Reports/ta-p/69951

Tom Piens
PANgurus - (co)managed services and consultancy
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!