We need to view rule usage which shows the hit-count of each rule

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

We need to view rule usage which shows the hit-count of each rule

L2 Linker

Hi 

 

We need to view rule usage which shows the hit-count of each rule  is it possible to view this option in the os 8.0.10 

2 REPLIES 2

L6 Presenter

You could play with custom reports and count sessions per rule name for a given period of time (assuming you have traffic logs for that period).

 

But proper rule hit counts were introduced in 8.1.0

Cyber Elite
Cyber Elite

@HemanthV,

As @santonic mentioned you'll have to do the old work around of creating a custom report to view this information, which is only really helpful for short time periods or viewing specific rules over a period of time. Larger installs will run into issue with this as there is no easy way to view the count associated with all of the security policies with the limitations of the custom reports. 

You can also build this out progamatically with the API easily enough to feed the information into a simple database to create reports for hit counts as you need them.

 

I'd say that you can't easily view this information without updating to 8.1 where the feature is actually built into the OS. I also wouldn't really recommend running 8.1 yet unless you have a lab environement that you can mirror your production system in and verify that all of the features that you are using actually function as required. 

  • 2372 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!