Configuring Report Queries
The predefined list of queries covers the most common administrator and stakeholder interests. It includes some of the following:
- SLB-Top-Policy-By-Bytes
- SLB-Top-Source-By-Bytes
- SLB-Top-Source-Country-By-Bytes
- SLB-History-Flow-By-Bytes (total traffic over time)
- LLB-Top-Link-by-Bytes
- LLB-History-Flow-By-Bytes (total traffic over time)
- DNS-Top-Policy-by-Count
- DNS-Top-Source-by-Count
- Attack-Top-Destination-For-IPReputation-By-Count
- Attack-Top-Source-For-IPReputation-By-Count
- Attack-Top-Source-Country-For-IPReputation-By-Count
- Attack-Top-Destination-For-Synflood-By-Count
- Attack-Top-Destination-For-GEO-By-Count
- Attack-Top-Source-For-GEO-By-Count
- Attack-Top-Source-Country-For-GEO-By-Count
- Attack-Top-Destination-For-WAF-By-Count
- Attack-Top-Source-For-WAF-By-Count
- Attack-Top-Source-Country-For-WAF-By-Count
- Event-Top-Admin-Login-By-Count
- Event-Top-Failed-Admin-Login-By-Count
- Event-Top-Admin-Config-By-Count
If necessary, you can create your own query configuration objects.
Before you begin:
- You must have Read-Write permission for Log & Report settings.
After you have created a query configuration object, you can select it in the report configuration.
To configure report queries:
- Go to Log & Report > Report Config.
- Click the Query Set tab.
- Click Create New to display the configuration editor.
- Complete the configuration as described in Query configuration.
- Save the configuration.
The Report tab is displayed.
| Settings | Guidelines |
|---|---|
|
Name |
Configuration name. Valid characters are Note: After you initially save the configuration, you cannot edit the name. |
|
Module |
|
| SLB | |
| SLB Submodule |
|
| SubType |
Submodule All has the following subtypes:
Submodule HTTP has the following subtypes:
|
| Traffic Sort Type |
Submodule All has the following Traffic Sort Types
Submodule HTTP has the following Traffic Sort Types:
|
| LLB | |
| Traffic Sort Type |
|
| LLB Subtype |
|
| DNS | |
| DNS Sort Type | Only count is applicable. |
| DNS Subtype |
|
| Attack | |
| Attack Sort Type | Only count is applicable. |
| Attack Subtype |
|
| Event | |
| Event Sort Type | Only count is applicable. |
| Event Subtype |
|