App Control dataset

[Fullmoon]

Can we create dataset similar to this report request?

Top 10 Applications in a given policy

Columns:

Services / Application Name

User / Source IP address

Total Bandwidth consumption per application

Bandwidth consumption per IP address[/ul]

[hzhao_FTNT]

Hi there, predefined dataset app-Top-User-by-Bandwidth can do, but you have to create a drill-down chart based on it, please follow attached screenshot.

regards,

hz

[Fullmoon]

Hi hz,

appreciate your reply.

Are you referring to bandwidth-app-Top-Users-By-Bandwidth? under dataset I cant find this "app-Top-User-by-Bandwidth"

Now if Im going to use bandwidth-app-Top-Users-By-Bandwidth in the Chart Library, under Column 1 Data Binding app is not available similar to yours. pls see attached file. thanks

[Fullmoon]

@hzhao_FTNT any feedback pls.. thanks

[hzhao_FTNT]

Hi there, this dataset is from FAZ 5.4+. You can create a custom query as below:

log type: traffic

select app, coalesce(nullifna(`user`), nullifna(`unauthuser`), ipstr(`srcip`)) as user_src, sum(coalesce(`sentbyte`, 0)+coalesce(`rcvdbyte`, 0)) as bandwidth from $log where $filter and logid_to_int(logid) not in (4, 7, 14) and nullifna(app) is not null group by app, user_src order by bandwidth desc

Then create a drilldown chart based on it.

regards,

hz