User Tools

Site Tools


tips:paloalto

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
tips:paloalto [2019/11/01 17:20] – [Counter Groups] veeratips:paloalto [2019/11/01 17:43] – [New Counter Groups : User-ID and App-ID] veera
Line 19: Line 19:
  
 ^meter^description^ ^meter^description^
-|Total traffic|  Total traffic bandwidth used by a User or App|+|Total traffic|Total traffic bandwidth used by a User or App|
 |Download traffic| Download bandwidth used by per User/App. The Download direction is metered when the flow source IP is an external IP address and the destination-IP is internal. Internal IPs belong to the Home Network configured in Trisul| |Download traffic| Download bandwidth used by per User/App. The Download direction is metered when the flow source IP is an external IP address and the destination-IP is internal. Internal IPs belong to the Home Network configured in Trisul|
 |Upload traffic| per-User bandwidth out of home network to external| |Upload traffic| per-User bandwidth out of home network to external|
Line 25: Line 25:
 |Transit traffic| where both source and destination are outside the home network. You will typically not find data here in normal enterprise environments| |Transit traffic| where both source and destination are outside the home network. You will typically not find data here in normal enterprise environments|
 |Flows| Total number of flows active per user/app | |Flows| Total number of flows active per user/app |
 +
 +
 +To view these metrics 
 +  * **Use Retro Analysis** : Select //Retro > Retro Counters// then select a time frame, then select User-ID from the list of counters shown on the right side.  You can see the top items for each metric.
 +  * **Create dashboards** : Customize > UI >Dashboards > Create a new dashboard. Give it a name. Then Press the + button to add a new module.   Clone "Current Top Hosts" of type "current toppers in a list". Then edit to module to change to User-ID and Metric 0. 
 +
 +The retro analysis screen looks like below.
  
  
Line 34: Line 41:
 Create flow tags Create flow tags
  
-Create dashboards 
  
 Query by user-id and app-id Query by user-id and app-id
tips/paloalto.txt · Last modified: 2019/11/01 18:25 by veera