We've just got a new Panorama and Palo Alto implementation done.
Reviewing the reporting options I noticed that a "User Activity Report" can not be requested from the Panorama server.
It can be requested from the devices themselves.
My issue with running the report from the devices is that we have an active/Passive setup, so I need to run the report on both devices and bring them togehter. Knowing the report is in PDF-format, this is a hell of a job.
Seeing that Panorama is THE reporting engine, I was wondering if something needs to be tuned or enabled on Panorama to be able to run the user activity report from the Panorama server, which could them combine logs from both devices.
Any insights are more than welcome.
You can filter reports on Panorama by user to achieve something similar to the UAR - this is the current solution. Other than changing the context in Panorama and running the report directly from the device.
The "Canned" UAR reporting function will be added to the next major release of Panorama due out begining of 2011.
OK - so how do you pull a user report based on IP, we have a similar situation to ariodique's. I keep getting "no data found" - clearly I'm doing something wrong. I need a report that goes back several months but I can't seem to determine how far back my data goes before it "rolls off". We also use Panorama for managing and reporting.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!