Report src - dst per policy

[Deftone]

Hi,

I'm trying to make a datasheet to create reports showing source, destination and policyid per policy. What I made does not work as expected.. Is there someone that can provide me with the right script. What I tried:

select `srcip`, sum(coalesce(`rcvdbyte`,0)) as received_bytes from $log where $filter and (ipstr(`srcip`)='') group by `srcip` order by policyid

Thanks

[hzhao_FTNT]

Hi there, try below dataset:

log type=traffic

select srcip,  dstip, policyid, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log where $filter and logid_to_int(logid) not in (4, 7, 14) group by srcip,  dstip, policyid order by bandwidth desc

[Deftone]

Yess thank you... Now I'm seeing source and destinations with right policyid's 

Just one more question..IS it also possible to create Datasheet per policy id...

Something like show srcip, dstip in policyid 111 order by bandwidth ?

[hzhao_FTNT]

Are you looking for a drill down chart? Currently our drilldown chart support up to 3 columns, so we have to put srcip and dstip into a combined column.

dataset as below:

log type traffic

select policyid, ipstr(srcip) || ' | ' || ipstr(dstip) as src_dst_ip, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log where $filter and logid_to_int(logid) not in (4, 7, 14) group by src_dst_ip, policyid order by bandwidth desc

chart setting as below:

chart type: table

table type: drilldown

column 1: policyid

column 2: src_dst_ip

column 3: bandwidth

add this chart into report and run this report.

regards,

hz

[Deftone]

Thanks for al the reply's. I was away so cloud not anwser directly.

I did all above and the only thing I'm missing is that I want create report based on policyid

So let assume I have policy id 300. What I want is a chart that show me srcip, dstip order by bandwidth in policyid 300.

As for now I'm getting to much information on my report

[hzhao_FTNT]

You can apply a report filter under report settings: policyid=300

[Deftone]

Thank you very much... It works like charm