Common Reports
Common Reports
The following table contains a list of some of the common reports created by some of our customers.
Report Type | Description |
---|---|
Top 10 Application categories in Use | Create a report to summarize by Application Category and display the number of applications, sessions, and bytes. |
Top Applications categories eliminating some appcategories | Create a report to summarize by appcategory or application to show the data:
|
Identify more details on all the apps in a specific appcategory. This is to understand how many different apps are being used by the users in a single appcategory | Filter the report further by specifying specific appcategories. Use query appcategory eq |
Top users by Data movement | Create a report to summarize by users by data movement. |
App location outside of US | Create this report using the query: dst_country != US |
Top cloud storage apps consuming bandwidth | Use the query: appcategory eq 'Cloud Storage' ), and select the Page event type and Summarize by Application. |
Top risky cloud storage apps | Use the query: (ccl eq medium or ccl eq low or ccl eq poor)and appcategory = 'Cloud Storage' , and select the Page event type and Summarize by Application. |
Mobile users accessing cloud storage apps | Use the query: appcategory eq 'Cloud Storage' and device eq 'iOS Device' , and select the Application event type and Summarize by User. |
Apps with datacenters outside of the US | Use the query: "dst_country neq US and appcategory eq 'Cloud Storage'" , and select the Application event type and Summarize by Application. To get a list of users accessing these apps, Summarize by Users. |
Highest uploads to apps rated medium confidence or below | Create this report using the query: ccl eq medium or ccl eq low or ccl eq poor Summarize by Applications, bytes uploads. |
Top apps with no secure password policies | Create this report using the query: app-cci-secure-pass-policy eq No Summarize by Applications, sessions and bytes data |
OU-based reporting: If the log contains the OU or if ADConnector is deployed for doing the IP > User mapping, we can write reports based on OU hierarchy | Create a report as follows:
|
AD Group based reporting: If both Directory Importer and AD Connector are deployed, we can write reports based on AD Groups | Create a report with:
|