Common Reports
Common Reports
You are viewing classic reports documentation. When Reports (New Experience) is no longer in BETA, the classic reports documentation will be replaced with “Reports” documentation, aka Reports (New Experience).
The following table contains a list of some of the common reports created by some of our customers.
Report Type | Description |
---|---|
Top 10 Application categories in Use | Create a report to summarize by Application Category and display the number of applications, sessions, and bytes. |
Top Applications categories eliminating some appcategories | Create a report to summarize by appcategory or application to show the data:
|
Identify more details on all the apps in a specific appcategory. This is to understand how many different apps are being used by the users in a single appcategory | Filter the report further by specifying specific appcategories. Use query appcategory eq |
Top users by Data movement | Create a report to summarize by users by data movement. |
App location outside of US | Create this report using the query: dst_country != US |
Top cloud storage apps consuming bandwidth | Use the query: appcategory eq 'Cloud Storage' ), and select the Page event type and Summarize by Application. |
Top risky cloud storage apps | Use the query: (ccl eq medium or ccl eq low or ccl eq poor)and appcategory = 'Cloud Storage' , and select the Page event type and Summarize by Application. |
Mobile users accessing cloud storage apps | Use the query: appcategory eq 'Cloud Storage' and device eq 'iOS Device' , and select the Application event type and Summarize by User. |
Apps with datacenters outside of the US | Use the query: "dst_country neq US and appcategory eq 'Cloud Storage'" , and select the Application event type and Summarize by Application. To get a list of users accessing these apps, Summarize by Users. |
Highest uploads to apps rated medium confidence or below | Create this report using the query: ccl eq medium or ccl eq low or ccl eq poor Summarize by Applications, bytes uploads. |
Top apps with no secure password policies | Create this report using the query: app-cci-secure-pass-policy eq No Summarize by Applications, sessions and bytes data |
OU-based reporting: If the log contains the OU or if ADConnector is deployed for doing the IP > User mapping, we can write reports based on OU hierarchy | Create a report as follows:
|
AD Group based reporting: If both Directory Importer and AD Connector are deployed, we can write reports based on AD Groups | Create a report with:
|