TOP N Users

Question

TOP N Users

evgeniykl opened this issue 4 years ago · 2 comments

evgeniykl commented 4 years ago

Hi I Installed ElastiFlow and I get flows 9 from Palo Alto.
The applications top seems good but Users Top N now.

I downloaded the big file and didn't see my IP on the TOP.

What I can check?

Thanks.

Answer 1 · 2021-02-21T11:43:19.000Z

If you look at the raw records do you see that user name is provided in the data?

Answer 2 · 2021-02-22T04:40:51.000Z

Dear Rob,

Yes I see.
But I don't use the user identification which I get from the PA firewall. I want to see only IPs.
As we use NAT on firewall as I do Visualise to show destination nat clients ip.

Probably I do something wrong?

Thanks.