User Tools

Site Tools


tips:paloalto

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revisionBoth sides next revision
tips:paloalto [2019/11/01 17:21] – [New Counter Groups : User-ID and App-ID] veeratips:paloalto [2019/11/01 17:43] – [New Counter Groups : User-ID and App-ID] veera
Line 25: Line 25:
 |Transit traffic| where both source and destination are outside the home network. You will typically not find data here in normal enterprise environments| |Transit traffic| where both source and destination are outside the home network. You will typically not find data here in normal enterprise environments|
 |Flows| Total number of flows active per user/app | |Flows| Total number of flows active per user/app |
 +
 +
 +To view these metrics 
 +  * **Use Retro Analysis** : Select //Retro > Retro Counters// then select a time frame, then select User-ID from the list of counters shown on the right side.  You can see the top items for each metric.
 +  * **Create dashboards** : Customize > UI >Dashboards > Create a new dashboard. Give it a name. Then Press the + button to add a new module.   Clone "Current Top Hosts" of type "current toppers in a list". Then edit to module to change to User-ID and Metric 0. 
 +
 +The retro analysis screen looks like below.
  
  
Line 34: Line 41:
 Create flow tags Create flow tags
  
-Create dashboards 
  
 Query by user-id and app-id Query by user-id and app-id
tips/paloalto.txt · Last modified: 2019/11/01 18:25 by veera