Difference between revisions of "Firewall Reports"

From UntangleWiki
Jump to: navigation, search
 
Line 6: Line 6:
 
=== Reports ===
 
=== Reports ===
  
All Firewall reports can be accessed using the ''Select Reports'' window. All pre-defined reports will be listed along with any custom reports that have been created.  
+
This applications reports can be accessed via the ''Reports'' tab at the top or the ''Reports'' tab within the settings. All pre-defined reports will be listed along with any custom reports that have been created.  
  
 
Reports can be searched and further defined using the time selectors and the ''Conditions'' window at the bottom of the page. The data used in the report can be obtained on the ''Current Data'' window on the right.  
 
Reports can be searched and further defined using the time selectors and the ''Conditions'' window at the bottom of the page. The data used in the report can be obtained on the ''Current Data'' window on the right.  
 
  
 
Pre-defined report queries:  
 
Pre-defined report queries:  
 
{{#section:All_Reports|'Firewall'}}
 
{{#section:All_Reports|'Firewall'}}
  
 +
The tables queried to render these reports:
 +
* [[Database_Schema#sessions|sessions]]
  
=== Columns/Conditions ===
 
 
Conditions can be used to filter traffic information shown in reports and events. Each condition has a corresponding column that can be viewed in the events viewer. Multiple conditions can be added to drill down and inspect Firewall data. For a list of conditions, refer to the sessions table in [[Global DB Schema#sessions|Global DB Schema]].
 
  
 
<noinclude>
 
<noinclude>

Latest revision as of 18:56, 26 December 2016

The Reports tab provides a view of all reports and events for all traffic handled by Firewall.

Reports

This applications reports can be accessed via the Reports tab at the top or the Reports tab within the settings. All pre-defined reports will be listed along with any custom reports that have been created.

Reports can be searched and further defined using the time selectors and the Conditions window at the bottom of the page. The data used in the report can be obtained on the Current Data window on the right.

Pre-defined report queries:

Report Entry Description
Firewall Summary A summary of firewall actions.
Scanned Sessions The amount of scanned, flagged, and blocked sessions over time.
Top Scanned Hostnames The number of scanned session grouped by hostname.
Top Flagged Hostnames The number of flagged session grouped by hostname.
Top Blocked Hostnames The number of blocked sessions grouped by hostname.
Top Scanned Clients The number of scanned session grouped by client.
Top Flagged Clients The number of flagged session grouped by client.
Top Blocked Clients The number of blocked session grouped by client.
Top Scanned Usernames The number of scanned session grouped by username.
Top Flagged Usernames The number of flagged session grouped by username.
Top Blocked Usernames The number of blocked session grouped by username.
Top Scanned Server Ports The number of scanned session grouped by server (destination) port.
Top Flagged Server Ports The number of flagged session grouped by server (destination) port.
Top Blocked Server Ports The number of blocked session grouped by server (destination) port.
All Events All events scanned by Firewall App.
Flagged Events Events flagged by Firewall App.
Blocked Events Events blocked by Firewall App.


The tables queried to render these reports:



Related Topics

Report Viewer

Manage Reports