cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who rated this post

L4 Transporter

Hi, this should work for you

 

dataset = panw_ngfw_traffic_raw
| filter source_ip incidr "x.x.x.x/24"
| filter dest_port != 443 and dest_port != 80
| fields _time, source_ip, dest_ip, dest_port, action, app, bytes_sent, bytes_received, _device_id, rule_matched

 

happy querying

 

Who rated this post