Report types

The following table lists all Plixer Scrutinizer report types alongside their data aggregation parameters.

Amazon AWS

Report

Description

Action

A grouping of Action trending Flows, Packets, Bytes. Information Elements: aws_action, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Action with Interface

A grouping of Action, Interface trending Flows, Packets, Bytes. Information Elements: aws_action, aws_interface, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Action with Interface and Dst

A grouping of Destination, Action, Interface trending Flows, Packets, Bytes. Information Elements: destinationipaddress, aws_action, aws_interface, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Action with Interface and Src

A grouping of Source, Action, Interface trending Flows, Packets, Bytes. Information Elements: sourceipaddress, aws_action, aws_interface, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Availablity Zones

A grouping of Availability Zone trending Flows, Packets, Bytes. Information Elements: aws_az_id, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Dst Service

A grouping of Destination Service trending Flows, Packets, Bytes. Information Elements: aws_pkt_destination_service, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Interface

A grouping of Interface trending Flows, Packets, Bytes. Information Elements: aws_interface, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Pair Interface

A grouping of Source, Interface, Destination trending Flows, Packets, Bytes. Information Elements: sourceipaddress, aws_interface, destinationipaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Pair Interface Action

A grouping of Source, Interface, Action, Destination trending Flows, Packets, Bytes. Information Elements: sourceipaddress, aws_interface, aws_action, destinationipaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Src Service

A grouping of Source Service trending Flows, Packets, Bytes. Information Elements: aws_pkt_source_service, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Src Service-Dst Service

A grouping of Source Service, Destination Service trending Flows, Packets, Bytes. Information Elements: aws_pkt_source_service, aws_pkt_destination_service, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Traffic Path

A grouping of Path trending Flows, Packets, Bytes. Information Elements: aws_traffic_path, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

VPCs

A grouping of VPC trending Flows, Packets, Bytes. Information Elements: aws_vpc_id, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

AppFlow

Report

Description

Application

A grouping of Application trending Count, Packets, Bytes. Information Elements: appflow_applicationid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Application RTT

A grouping of Application, Destination trending Packets, Bytes, RTT. Information Elements: appflow_applicationid, destinationipaddress, octetdeltacount, packetdeltacount, tcprtt.

Connections

A grouping of Src Port, Source, Connection, Destination, Dst Port trending RTT, Count, Packets, Bytes. Information Elements: sourcetransportport, sourceipaddress, connectionid, destinationipaddress, destinationtransportport, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount, tcprtt.

HTTP Request Cookie

A grouping of Transaction ID, HTTP Request Cookie trending Flow Count, Bytes. Information Elements: transactionid, httprequestcookie, octetdeltacount, plixeraggregatedrecordcount.

HTTP Response Length

A grouping of Source, Src Port, Destination, Dst Port trending Count, Avg. Length. Information Elements: sourceipaddress, sourcetransportport, destinationipaddress, destinationtransportport, httpresponselen, plixeraggregatedrecordcount.

HTTP Response Time to First Byte

A grouping of Source, Src Port, Destination, Dst Port trending Count, Avg. Time. Information Elements: sourceipaddress, sourcetransportport, destinationipaddress, destinationtransportport, httpresponsetimetofirstbyte, plixeraggregatedrecordcount.

HTTP Response Time to Last Byte

A grouping of Source, Src Port, Destination, Dst Port trending Count, Avg. Time. Information Elements: sourceipaddress, sourcetransportport, destinationipaddress, destinationtransportport, httpresponsetimetolastbyte, plixeraggregatedrecordcount.

HTTP Status

A grouping of HTTP Status Code, Source, Src Port, Destination, Dst Port trending Count, Bytes. Information Elements: httpresponsestatus, sourceipaddress, sourcetransportport, destinationipaddress, destinationtransportport, octetdeltacount, plixeraggregatedrecordcount.

Request Host

A grouping of HTTP Request Host trending Count, Packets, Bytes. Information Elements: httprequesthost, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Request URL

A grouping of Request URL trending Count, Packets, Bytes. Information Elements: httprequesturl, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Syslog Message Flow Count

A grouping of syslogPriority, Syslog Message trending Flow Count. Information Elements: syslogpriority, syslogmessage, plixeraggregatedrecordcount.

Astaro

Report

Description

afcprotocol Conversations

A grouping of Source, afcprotocol, Destination trending Packets, Bytes. Information Elements: sourceipaddress, afcprotocol, destinationipaddress, octetdeltacount, packetdeltacount.

Top afcprotocol

A grouping of afcprotocol trending Packets, Bytes. Information Elements: afcprotocol, octetdeltacount, packetdeltacount.

Azure

Report

Description

Azure NSG All Details

A grouping of Rule Name, Application, Flow Decision, Flow State trending Packets, Bytes, Count. Information Elements: nsg_rulename, applicationid, nsg_flowdecision, nsg_flowstate, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Azure NSG Flow Decisions

A grouping of Flow Decision, Application trending Packets, Bytes, Count. Information Elements: nsg_flowdecision, applicationid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Azure NSG Flow Decisions Count

A grouping of Flow Decision trending Packets, Bytes, Count. Information Elements: nsg_flowdecision, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Azure NSG Flow States

A grouping of Flow State, Application trending Packets, Bytes, Count. Information Elements: nsg_flowstate, applicationid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Azure NSG Flow States Count

A grouping of Flow State trending Packets, Bytes, Count. Information Elements: nsg_flowstate, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Azure NSG Resource IDs

A grouping of Resource ID, Rule Name trending Packets, Bytes, Count. Information Elements: nsg_resourceid, nsg_rulename, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Azure VNET All Details

A grouping of Rule Name, Application, Flow State trending Packets, Bytes, Count. Information Elements: vnet_rulename, applicationid, vnet_flowstate, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Azure VNET Flow States

A grouping of Flow State, Application trending Packets, Bytes, Count. Information Elements: vnet_flowstate, applicationid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Azure VNET Flow States Count

A grouping of Flow State trending Packets, Bytes, Count. Information Elements: vnet_flowstate, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Azure VNET Resource IDs

A grouping of Target Resource ID, Rule Name trending Packets, Bytes, Count. Information Elements: vnet_targetresourceid, vnet_rulename, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Barracuda

Report

Description

Bind and Conn

A grouping of Bind IP , Bind Port, Conn IP, Conn Port trending Flows, Bytes. Information Elements: bindipv4address, bindtransportport, connipv4address, conntransportport, octetdeltacount, plixeraggregatedrecordcount.

FW Rule

A grouping of FW Rule trending Flows, Packets, Bytes. Information Elements: fwrule, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Logop

A grouping of Logop trending Flows, Packets, Bytes. Information Elements: logop, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Pair with Rule and Reason

A grouping of Source IP, Destination IP, FW Rule, Reason trending Flows, Bytes. Information Elements: sourceipaddress, destinationipaddress, fwrule, reasontext, octetdeltacount, plixeraggregatedrecordcount.

Pair with Rule, Reason, Service & Traffic

A grouping of Source IP, Destination IP, FW Rule, Reason, Service, Traffic Type trending Flows, Bytes. Information Elements: sourceipaddress, destinationipaddress, fwrule, reasontext, servicename, traffictype, octetdeltacount, plixeraggregatedrecordcount.

Reason

A grouping of Reason trending Flows, Packets, Bytes. Information Elements: reasontext, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Rule, Reason, Service, Traffic & Logop

A grouping of FW Rule, Reason, Service, Traffic Type, Logop trending Flows, Bytes. Information Elements: fwrule, reasontext, servicename, traffictype, logop, octetdeltacount, plixeraggregatedrecordcount.

Service

A grouping of Service trending Flows, Packets, Bytes. Information Elements: servicename, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Source, Bind, Conn, & Destination

A grouping of Source IP, Bind IP , Conn IP, Destination IP trending Flows, Bytes. Information Elements: sourceipaddress, bindipv4address, connipv4address, destinationipaddress, octetdeltacount, plixeraggregatedrecordcount.

Traffic Type

A grouping of Traffic Type trending Flows, Packets, Bytes. Information Elements: traffictype, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Chassis

Report

Description

Line Card

A grouping of Line Card trending Pkts, Bytes. Information Elements: linecardid, octetdeltacount, packetdeltacount.

Line Card Port

A grouping of Interface, Line Card, Port trending Pkts, Bytes. Information Elements: exportinterface, linecardid, portid, octetdeltacount, packetdeltacount.

Cisco AnyConnect

Report

Description

Dest Host IP & Name

A grouping of Destination, Dst Host Name trending Flows, Bytes In. Information Elements: destinationipaddress, nvzflowdestinationhostname, octetdeltacount, plixeraggregatedrecordcount.

DNS suffix

A grouping of DNS Suffix trending Flows, Bytes In. Information Elements: nvzflowdnssuffix, octetdeltacount, plixeraggregatedrecordcount.

Loggedin Source

A grouping of Logged User, Source trending Flows, Bytes. Information Elements: nvzflowloggedinuser, sourceipaddress, octetdeltacount, plixeraggregatedrecordcount.

Loggedin Source & DNS

A grouping of Logged User, Source, DNS Suffix trending Flows, Bytes. Information Elements: nvzflowloggedinuser, sourceipaddress, nvzflowdnssuffix, octetdeltacount, plixeraggregatedrecordcount.

Pair with Host Details

A grouping of Logged User, Source, Destination, Dst Host Name trending Flows, Bytes. Information Elements: nvzflowloggedinuser, sourceipaddress, destinationipaddress, nvzflowdestinationhostname, octetdeltacount, plixeraggregatedrecordcount.

Parent Process Details

A grouping of Parent Proc. Acct., Parent Proc. Name, Parent Proc. Hash trending Flows, Bytes. Information Elements: nvzflowparentprocessaccount, nvzflowparentprocessname, nvzflowparentprocesshash, octetdeltacount, plixeraggregatedrecordcount.

Process Details

A grouping of Process Name, Process Hash trending Flows, Bytes. Information Elements: nvzflowprocessname, nvzflowprocesshash, octetdeltacount, plixeraggregatedrecordcount.

Process to Host

A grouping of Parent Proc. Acct., Destination trending Flows, Bytes In. Information Elements: nvzflowparentprocessaccount, nvzflowdestinationhostname, octetdeltacount, plixeraggregatedrecordcount.

Source with Process

A grouping of Source, Logged User, Process Name, System Type trending Flows, Bytes. Information Elements: sourceipaddress, nvzflowloggedinuser, nvzflowprocessname, nvzflowsystemtype, octetdeltacount, plixeraggregatedrecordcount.

Station Name & Dst IP

A grouping of STA Name, Destination trending Flows, Bytes In. Information Elements: nvz_manu_virtual_station_name, destinationipaddress, octetdeltacount, plixeraggregatedrecordcount.

Station Name & Manufacturer

A grouping of STA Name, Manufacturer trending Flows, Bytes. Information Elements: nvz_manu_virtual_station_name, nvz_manu_system_manufacturer, octetdeltacount, plixeraggregatedrecordcount.

Station Name & Process

A grouping of STA Name, Process Account trending Flows, Bytes In. Information Elements: nvz_manu_virtual_station_name, nvz_manu_process_account, octetdeltacount, plixeraggregatedrecordcount.

Station Name & Src IP

A grouping of STA Name, Source trending Flows, Bytes In. Information Elements: nvz_manu_virtual_station_name, sourceipaddress, octetdeltacount, plixeraggregatedrecordcount.

Station Name & User

A grouping of STA Name, User trending Flows, Bytes In. Information Elements: nvz_manu_virtual_station_name, nvzflowloggedinuser, octetdeltacount, plixeraggregatedrecordcount.

Top Domains

A grouping of Dst Host Name trending Flows, Bytes In. Information Elements: nvzflowdestinationhostname, octetdeltacount, plixeraggregatedrecordcount.

Top Manufacturers

A grouping of Manufacturers trending Flows, Bytes In. Information Elements: nvz_manu_system_manufacturer, octetdeltacount, plixeraggregatedrecordcount.

Top OSs

A grouping of OS Name trending Flows, Bytes In. Information Elements: nvz_manu_os_name, octetdeltacount, plixeraggregatedrecordcount.

Top OS / Version

A grouping of OS Name, OS Version trending Flows, Bytes In. Information Elements: nvz_manu_os_name, nvz_manu_os_version, octetdeltacount, plixeraggregatedrecordcount.

Top Processes

A grouping of Process trending Flows, Bytes In. Information Elements: nvzflowprocessname, octetdeltacount, plixeraggregatedrecordcount.

Top Stations

A grouping of STA Name trending Flows, Bytes In. Information Elements: nvz_manu_virtual_station_name, octetdeltacount, plixeraggregatedrecordcount.

Top Users

A grouping of User trending Flows, Bytes In. Information Elements: nvzflowloggedinuser, octetdeltacount, plixeraggregatedrecordcount.

Cisco AVC

Report

Description

EzPM: Host Jitter by SSRC (Dst)

A grouping of Destination, DSCP, SSRC trending % Pkt Loss, TEPL, Jitter. Information Elements: destinationipaddress, ipdiffservcodepoint, trans_rtp_ssrc, ciscopktlostpercent, rtp_jitter_mean_sum, trans_pkt_lost_count.

EzPM: Host Jitter by SSRC (Src)

A grouping of Source, DSCP, SSRC trending % Pkt Loss, TEPL, Jitter. Information Elements: sourceipaddress, ipdiffservcodepoint, trans_rtp_ssrc, ciscopktlostpercent, rtp_jitter_mean_sum, trans_pkt_lost_count.

EzPM: Host Jitter (Dst)

A grouping of Destination, DSCP trending % Pkt Loss, TEPL, Jitter. Information Elements: destinationipaddress, ipdiffservcodepoint, ciscopktlostpercent, rtp_jitter_mean_sum, trans_pkt_lost_count.

EzPM: Host Jitter (Src)

A grouping of Source, DSCP trending % Pkt Loss, TEPL, Jitter. Information Elements: sourceipaddress, ipdiffservcodepoint, ciscopktlostpercent, rtp_jitter_mean_sum, trans_pkt_lost_count.

EzPM: Host to Host Jitter

A grouping of Source, DSCP, Destination trending % Pkt Loss, TEPL, Max Jitter, Jitter. Information Elements: sourceipaddress, ipdiffservcodepoint, destinationipaddress, ciscopktlostpercent, rtp_jitter_mean_sum, trans_pkt_lost_count.

EzPM: Host to Host Jitter by SSRC

A grouping of Source, DSCP, Destination, SSRC trending % Pkt Loss, TEPL, Jitter. Information Elements: sourceipaddress, ipdiffservcodepoint, destinationipaddress, trans_rtp_ssrc, ciscopktlostpercent, rtp_jitter_mean_sum, trans_pkt_lost_count.

EzPM: Jitter by Interface

A grouping of Exporter, in Int trending % Pkt Loss, Jitter. Information Elements: plixerexporter, ingressinterface, ciscopktlostpercent, rtp_jitter_mean_sum.

EzPM: Metadata Jitter

A grouping of Application trending % Pkt Loss, TEPL, Jitter. Information Elements: applicationtag, ciscopktlostpercent, rtp_jitter_mean_sum, trans_pkt_lost_count.

EzPM: Metadata Jitter by DSCP

A grouping of Application, DSCP trending % Pkt Loss, TEPL, Jitter. Information Elements: applicationtag, ipdiffservcodepoint, ciscopktlostpercent, rtp_jitter_mean_sum, trans_pkt_lost_count.

EzPM: Metadata-Session Jitter

A grouping of Application, globalsessionid, DSCP trending % Pkt Loss, TEPL, Jitter. Information Elements: applicationtag, globalsessionid, ipdiffservcodepoint, ciscopktlostpercent, rtp_jitter_mean_sum, trans_pkt_lost_count.

EzPM: Metadata-Version Jitter

A grouping of Application, Application Version Id, DSCP trending % Pkt Loss, TEPL, Jitter. Information Elements: applicationtag, app_version_id, ipdiffservcodepoint, ciscopktlostpercent, rtp_jitter_mean_sum, trans_pkt_lost_count.

Host and URI

A grouping of Server, HTTP Host, URI Stat trending Packets, Bytes. Information Elements: serveripv4address, subapplicationvalue, uristatistic, octetdeltacount, packetdeltacount.

Jitter by Interface

A grouping of Exporter, in Int trending % Pkt Loss, Jitter. Information Elements: plixerexporter, ingressinterface, ciscopktlostpercent, trans_rtp_jitter.

NBAR: Metadata Jitter

A grouping of Application trending % Pkt Loss, TEPL, Jitter. Information Elements: applicationtag, ciscopktlostpercent, trans_event_pkt_lost_count, trans_rtp_jitter.

NBAR: Metadata Jitter by DSCP

A grouping of Application, DSCP trending % Pkt Loss, TEPL, Jitter. Information Elements: applicationtag, ipdiffservcodepoint, ciscopktlostpercent, trans_event_pkt_lost_count, trans_rtp_jitter.

NBAR: Metadata RTT

A grouping of Application trending RTT. Information Elements: applicationtag, trans_rtt.

NBAR: Metadata RTT by DSCP

A grouping of Application, DSCP trending RTT. Information Elements: applicationtag, ipdiffservcodepoint, trans_rtt.

NBAR: Metadata-Session Jitter

A grouping of Application, globalsessionid, DSCP trending % Pkt Loss, TEPL, Jitter. Information Elements: applicationtag, globalsessionid, ipdiffservcodepoint, ciscopktlostpercent, trans_event_pkt_lost_count, trans_rtp_jitter.

NBAR: Metadata-Session RTT

A grouping of Application, globalsessionid, DSCP trending RTT. Information Elements: applicationtag, globalsessionid, ipdiffservcodepoint, trans_rtt.

NBAR: Metadata-Version Jitter

A grouping of Application, Application Version Id, DSCP trending % Pkt Loss, TEPL, Jitter. Information Elements: applicationtag, app_version_id, ipdiffservcodepoint, ciscopktlostpercent, trans_event_pkt_lost_count, trans_rtp_jitter.

NBAR: Metadata-Version RTT

A grouping of Application, Application Version Id, DSCP trending RTT. Information Elements: applicationtag, app_version_id, ipdiffservcodepoint, trans_rtt.

Percent Re-Transmitted By Interface

A grouping of Exporter, in Int trending Packets, RTX Pkts, AVG % RTX. Information Elements: plixerexporter, ingressinterface, clientretransmissionspackets, packetdeltacount, retransmittedpercent.

PfA: Application Avg. Transaction Duration (cs)

A grouping of Application trending Avg Trans. Duration. Information Elements: applicationtag, avc_avgtranstime.

PfA: Application Delay

A grouping of Application trending App Delay. Information Elements: applicationtag, avc_avgsvrresptime.

PfA: Application Performance

A grouping of Application, DSCP trending Dest Hosts, RTX Pkts, App Delay. Information Elements: applicationtag, ipdiffservcodepoint, avc_avgsvrresptime, clientretransmissionspackets, plixeraggregatedrecordcount.

PfA: Connections App Delay

A grouping of Client, Application, Server trending App Delay. Information Elements: sourceipaddress, applicationtag, destinationipaddress, avc_avgsvrresptime.

PfA: Connections App Delay (cs)

A grouping of Client, Application, Server trending App Delay. Information Elements: clientipv4address, applicationtag, serveripv4address, avc_avgsvrresptime.

PfA: Connections App Trans. Duration (cs)

A grouping of Client, Application, Server trending Avg Trans. Duration. Information Elements: clientipv4address, applicationtag, serveripv4address, avc_avgtranstime.

PfA: Connections Nwk Delay

A grouping of Client, Application, Server trending Nwk Delay. Information Elements: sourceipaddress, applicationtag, destinationipaddress, avc_avgnwktime.

PfA: Connections Nwk Delay (cs)

A grouping of Client, Application, Server trending Nwk Delay. Information Elements: clientipv4address, applicationtag, serveripv4address, avc_avgnwktime.

PfA: Connections Trans. Duration

A grouping of Client, Application, Server trending Avg Trans. Duration. Information Elements: sourceipaddress, applicationtag, destinationipaddress, avc_avgtranstime.

PfA: Connections Trans. Duration (cs)

A grouping of Client, Server trending Avg Trans. Duration. Information Elements: clientipv4address, serveripv4address, avc_avgtranstime.

PfA: Conversations

A grouping of Client, Server, App trending Packets, RTX Pkts, % RTX, Clnt Delay, Svr Delay, App Delay, TXN Delay. Information Elements: sourceipaddress, destinationipaddress, applicationtag, avc_avgcltnwktime, avc_avgsvrnwktime, avc_avgsvrresptime, avc_avgtranstime, clientretransmissionspackets, packetdeltacount, retransmittedpercent.

PfA: Conversations (cs)

A grouping of Client, Server, App trending Packets, RTX Pkts, % RTX, Clnt Delay, Svr Delay, App Delay, TXN Delay. Information Elements: clientipv4address, serveripv4address, applicationtag, avc_avgcltnwktime, avc_avgsvrnwktime, avc_avgsvrresptime, avc_avgtranstime, clientretransmissionspackets, packetdeltacount, retransmittedpercent.

PfA: Conversations NBAR with QoS

A grouping of Client, Application, Server, QoS Policy trending Packets, Bytes. Information Elements: sourceipaddress, applicationtag, destinationipaddress, policymaphierarchy, octetdeltacount, packetdeltacount.

PfA: Conversations NBAR with QoS (cs)

A grouping of Client, Application, Server, QoS Policy trending Packets, Bytes. Information Elements: clientipv4address, applicationtag, serveripv4address, policymaphierarchy, octetdeltacount, packetdeltacount.

PfA: Conversation Trans. Duration vs Retransmission

A grouping of Client, Application, Server trending Packets, RTX Pkts, % RTX, Avg Trans. Duration. Information Elements: sourceipaddress, applicationtag, destinationipaddress, avc_avgtranstime, clientretransmissionspackets, packetdeltacount, retransmittedpercent.

PfA: Conversation Trans. Duration vs Retransmission (cs)

A grouping of Client, Application, Server trending Packets, RTX Pkts, % RTX, Avg Trans. Duration. Information Elements: clientipv4address, applicationtag, serveripv4address, avc_avgtranstime, clientretransmissionspackets, packetdeltacount, retransmittedpercent.

PfA: HTTP Host

A grouping of HTTP Host trending Packets, Bytes. Information Elements: httphostname, octetdeltacount, packetdeltacount.

PfA: HTTP Host By Client

A grouping of Client, HTTP Host trending Packets, Bytes. Information Elements: sourceipaddress, httphostname, octetdeltacount, packetdeltacount.

PfA: HTTP Host By Client (cs)

A grouping of Client, HTTP Host trending Packets, Bytes. Information Elements: clientipv4address, httphostname, octetdeltacount, packetdeltacount.

PfA: HTTP Host Trans. Duration by Host

A grouping of Client, HTTP Host trending Avg Trans. Duration. Information Elements: sourceipaddress, httphostname, avc_avgtranstime.

PfA: HTTP Host Trans. Duration by Host (cs)

A grouping of Client, HTTP Host trending Avg Trans. Duration. Information Elements: clientipv4address, httphostname, avc_avgtranstime.

PfA: Network Delay by Application (LL)

A grouping of App trending Client Delay, Server Delay, Network Delay. Information Elements: applicationtag, sumlonglivedclientnwktime, sumlonglivednwktime, sumlonglivedservernwktime.

PfA: Network Delay by Client (LL)

A grouping of Client trending Client Delay, Server Delay, Network Delay. Information Elements: clientipv4address, sumlonglivedclientnwktime, sumlonglivednwktime, sumlonglivedservernwktime.

PfA: Network Delay by Server (LL)

A grouping of Server trending Client Delay, Server Delay, Network Delay. Information Elements: serveripv4address, sumlonglivedclientnwktime, sumlonglivednwktime, sumlonglivedservernwktime.

PfA: Root Cause Delay (cs)

A grouping of Client, App, CBQoS, DSCP, Server trending Packets, RTX Pkts, % RTX, CND, SND, App Delay, Nwk Delay. Information Elements: clientipv4address, applicationtag, policymaphierarchy, ipdiffservcodepoint, serveripv4address, avc_avgcltnwktime, avc_avgnwktime, avc_avgsvrnwktime, avc_avgsvrresptime, clientretransmissionspackets, packetdeltacount, retransmittedpercent.

PfA: Root Cause Delay w/ Users

A grouping of Client, App, CBQoS, DSCP, Server trending Packets, RTX Pkts, % RTX, CND, SND, App Delay, Nwk Delay. Information Elements: sourceipaddress, applicationtag, policymaphierarchy, ipdiffservcodepoint, destinationipaddress, avc_avgcltnwktime, avc_avgnwktime, avc_avgsvrnwktime, avc_avgsvrresptime, clientretransmissionspackets, packetdeltacount, retransmittedpercent.

PfA: Root Cause Delay w/ Users (cs)

A grouping of Client, User Name(s), App, CBQoS, DSCP, Server trending Packets, RTX Pkts, % RTX, CND, SND, App Delay, Nwk Delay. Information Elements: clientipv4address, clientipname, applicationtag, policymaphierarchy, ipdiffservcodepoint, serveripv4address, avc_avgcltnwktime, avc_avgnwktime, avc_avgsvrnwktime, avc_avgsvrresptime, clientretransmissionspackets, packetdeltacount, retransmittedpercent.

PfA: Server All Apps Delay

A grouping of Server trending App Delay. Information Elements: destinationipaddress, avc_avgsvrresptime.

PfA: Server All Apps Delay (cs)

A grouping of Server trending App Delay. Information Elements: serveripv4address, avc_avgsvrresptime.

PfA: Server Application Delay

A grouping of Server, Application trending App Delay. Information Elements: destinationipaddress, applicationtag, avc_avgsvrresptime.

PfA: Server Application Delay (cs)

A grouping of Server, Application trending App Delay. Information Elements: serveripv4address, applicationtag, avc_avgsvrresptime.

PfA: Top QoS Policies

A grouping of QoS Policy trending Packets, Bytes. Information Elements: policymaphierarchy, octetdeltacount, packetdeltacount.

PfM: Application Latency

A grouping of Application trending TEPL, RTT. Information Elements: applicationid, trans_event_pkt_lost_count, trans_rtt.

PfM: Connections RTT

A grouping of src Port, Source, Destination, dstPort trending TEPL, RTT. Information Elements: sourcetransportport, sourceipaddress, destinationipaddress, destinationtransportport, trans_event_pkt_lost_count, trans_rtt.

PfM: Domain RTT (Dst)

A grouping of Destination Domain, DSCP trending TEPL, RTT. Information Elements: dstdomain, ipdiffservcodepoint, trans_event_pkt_lost_count, trans_rtt.

PfM: Domain RTT (Src)

A grouping of Source Domain, DSCP trending TEPL, RTT. Information Elements: srcdomain, ipdiffservcodepoint, trans_event_pkt_lost_count, trans_rtt.

PfM: Host Jitter by SSRC (Dst)

A grouping of Destination, DSCP, SSRC trending % Pkt Loss, TEPL, Jitter. Information Elements: destinationipaddress, ipdiffservcodepoint, trans_rtp_ssrc, ciscopktlostpercent, trans_event_pkt_lost_count, trans_rtp_jitter.

PfM: Host Jitter by SSRC (Src)

A grouping of Source, DSCP, SSRC trending % Pkt Loss, TEPL, Jitter. Information Elements: sourceipaddress, ipdiffservcodepoint, trans_rtp_ssrc, ciscopktlostpercent, trans_event_pkt_lost_count, trans_rtp_jitter.

PfM: Host Jitter (Dst)

A grouping of Destination, DSCP trending % Pkt Loss, TEPL, Jitter. Information Elements: destinationipaddress, ipdiffservcodepoint, ciscopktlostpercent, trans_event_pkt_lost_count, trans_rtp_jitter.

PfM: Host Jitter (Src)

A grouping of Source, DSCP trending % Pkt Loss, TEPL, Jitter. Information Elements: sourceipaddress, ipdiffservcodepoint, ciscopktlostpercent, trans_event_pkt_lost_count, trans_rtp_jitter.

PfM: Host RTT (Dst)

A grouping of Destination, DSCP trending TEPL, RTT. Information Elements: destinationipaddress, ipdiffservcodepoint, trans_event_pkt_lost_count, trans_rtt.

PfM: Host RTT (Src)

A grouping of Source, DSCP trending TEPL, RTT. Information Elements: sourceipaddress, ipdiffservcodepoint, trans_event_pkt_lost_count, trans_rtt.

PfM: Host to Host Application Jitter by SSRC

A grouping of Source, Application, DSCP, Destination, SSRC trending % Pkt Loss, TEPL, Byte Rate, Jitter. Information Elements: sourceipaddress, applicationtag, ipdiffservcodepoint, destinationipaddress, trans_rtp_ssrc, app_media_byte_rate, ciscopktlostpercent, trans_event_pkt_lost_count, trans_rtp_jitter.

PfM: Host to Host Jitter

A grouping of Source, DSCP, Destination trending % Pkt Loss, TEPL, Max Jitter, Jitter. Information Elements: sourceipaddress, ipdiffservcodepoint, destinationipaddress, ciscopktlostpercent, trans_event_pkt_lost_count, trans_rtp_jitter.

PfM: Host to Host Jitter by SSRC

A grouping of Source, DSCP, Destination, SSRC trending % Pkt Loss, TEPL, Jitter. Information Elements: sourceipaddress, ipdiffservcodepoint, destinationipaddress, trans_rtp_ssrc, ciscopktlostpercent, trans_event_pkt_lost_count, trans_rtp_jitter.

PfM: Host to Host RTP Type and Rate

A grouping of Source, Destination, SSRC, Type trending Byte Rate, Jitter. Information Elements: sourceipaddress, destinationipaddress, trans_rtp_ssrc, trans_rtp_payload_type, app_media_byte_rate, trans_rtp_jitter.

PfM: Host to Host RTT

A grouping of Source, DSCP, Destination trending TEPL, RTT. Information Elements: sourceipaddress, ipdiffservcodepoint, destinationipaddress, trans_event_pkt_lost_count, trans_rtt.

PfM: Latency by Interface

A grouping of Exporter, in Int trending RTT. Information Elements: plixerexporter, ingressinterface, trans_rtt.

PfM: Subnet Jitter (Dst)

A grouping of Dst Subnet, DSCP trending % Pkt Loss, TEPL, Jitter. Information Elements: dstnetwork, ipdiffservcodepoint, ciscopktlostpercent, trans_event_pkt_lost_count, trans_rtp_jitter.

PfM: Subnet Jitter (Src)

A grouping of Src Subnet, DSCP trending % Pkt Loss, TEPL, Jitter. Information Elements: srcnetwork, ipdiffservcodepoint, ciscopktlostpercent, trans_event_pkt_lost_count, trans_rtp_jitter.

PfM: Subnet RTT (Dst)

A grouping of Dst Subnet, DSCP trending TEPL, RTT. Information Elements: dstnetwork, ipdiffservcodepoint, trans_event_pkt_lost_count, trans_rtt.

PfM: Subnet RTT (Src)

A grouping of Src Subnet, DSCP trending TEPL, RTT. Information Elements: srcnetwork, ipdiffservcodepoint, trans_event_pkt_lost_count, trans_rtt.

PfM: Subnet to Subnet Jitter

A grouping of Src Subnet, DSCP, Dst Subnet trending % Pkt Loss, TEPL, Jitter. Information Elements: srcnetwork, ipdiffservcodepoint, dstnetwork, ciscopktlostpercent, trans_event_pkt_lost_count, trans_rtp_jitter.

PfM: Subnet to Subnet RTT

A grouping of Src Subnet, DSCP, Dst Subnet trending TEPL, RTT. Information Elements: srcnetwork, ipdiffservcodepoint, dstnetwork, trans_event_pkt_lost_count, trans_rtt.

PfM: VoIP

A grouping of Source, Application, DSCP, CBQoS, RTP Payload, Destination, SSRC trending TEPL, Jitter. Information Elements: sourceipaddress, applicationtag, ipdiffservcodepoint, policymaphierarchy, trans_rtp_payload_type, destinationipaddress, trans_rtp_ssrc, trans_event_pkt_lost_count, trans_rtp_jitter.

PfR: Active Jitter

A grouping of Border Router, out Int, Traffic Class trending Jitter. Information Elements: ipv4_br_addr, egressinterface, pfrtrafficclass, trans_rtp_jitter.

PfR: Active Jitter OOP

A grouping of Border Router, out Int, Traffic Class, PfR Status trending Jitter. Information Elements: ipv4_br_addr, egressinterface, pfrtrafficclass, pfr_status, trans_rtp_jitter.

PfR: Active mos

A grouping of Border Router, out Int, Traffic Class trending % Thresh. Information Elements: ipv4_br_addr, egressinterface, pfrtrafficclass, rtpworstmos100.

PfR: Active mos OOP

A grouping of Border Router, out Int, Traffic Class, PfR Status trending % Thresh. Information Elements: ipv4_br_addr, egressinterface, pfrtrafficclass, pfr_status, rtpworstmos100.

PfR: Active OOP

A grouping of Border Router, out Int, Traffic Class, PfR Status trending Count. Information Elements: ipv4_br_addr, egressinterface, pfrtrafficclass, pfr_status, plixeraggregatedrecordcount.

PfR: Active RTT

A grouping of Border Router, out Int, Traffic Class trending RTT. Information Elements: ipv4_br_addr, egressinterface, pfrtrafficclass, trans_rtt.

PfR: Active RTT OOP

A grouping of Border Router, out Int, Traffic Class, PfR Status trending RTT. Information Elements: ipv4_br_addr, egressinterface, pfrtrafficclass, pfr_status, trans_rtt.

PfR: OOP Detail

A grouping of MasterController, Border Router, out Int, Traffic Class, PfR Status trending Count. Information Elements: plixerexporter, ipv4_br_addr, egressinterface, pfrtrafficclass, pfr_status, plixeraggregatedrecordcount.

PfR: OOP Master Controllers

A grouping of MasterController, PfR Class trending Count. Information Elements: plixerexporter, pfrtrafficclass, plixeraggregatedrecordcount.

PfR: Passive OOP

A grouping of Border Router, out Int, Traffic Class, PfR Status trending Count. Information Elements: ipv4_br_addr, egressinterface, pfrtrafficclass, pfr_status, plixeraggregatedrecordcount.

PfR: Passive RTT

A grouping of Border Router, out Int, Traffic Class trending RTT. Information Elements: ipv4_br_addr, egressinterface, pfrtrafficclass, trans_rtt.

PfR: Passive RTT OOP

A grouping of Border Router, out Int, Traffic Class, PfR Status trending RTT. Information Elements: ipv4_br_addr, egressinterface, pfrtrafficclass, pfr_status, trans_rtt.

Cisco CTS

Report

Description

ctsDestination Group

A grouping of ctsdestinationgrouptag trending Packets, Bytes. Information Elements: ctsdestinationgrouptag, octetdeltacount, packetdeltacount.

ctsGroups Connections

A grouping of src Port, Group Tag, ctsdestinationgrouptag, dst Port trending Packets, Bytes. Information Elements: sourcetransportport, ctssourcegrouptag, ctsdestinationgrouptag, destinationtransportport, octetdeltacount, packetdeltacount.

ctsGroups Conversations

A grouping of Group Tag, Well Known, ctsdestinationgrouptag, Rate trending Packets, Bytes. Information Elements: ctssourcegrouptag, commonport, ctsdestinationgrouptag, rate, octetdeltacount, packetdeltacount.

ctsGroups Grouped Flows

A grouping of src Port, Group Tag, Type Of Service, ctsdestinationgrouptag, dst Port trending Packets, Bytes. Information Elements: sourcetransportport, ctssourcegrouptag, ipclassofservice, ctsdestinationgrouptag, destinationtransportport, octetdeltacount, packetdeltacount.

ctsSource Group

A grouping of Group Tag trending Packets, Bytes. Information Elements: ctssourcegrouptag, octetdeltacount, packetdeltacount.

ctsSrcGrp to ctsDstGrp

A grouping of Group Tag, ctsdestinationgrouptag trending Packets, Bytes. Information Elements: ctssourcegrouptag, ctsdestinationgrouptag, octetdeltacount, packetdeltacount.

Cisco FW

Report

Description

ACL to ACL

A grouping of Ingress ACL, Egress ACL trending Flows. Information Elements: nf_f_ingress_acl_id, nf_f_egress_acl_id, plixeraggregatedrecordcount.

Egress ACL

A grouping of Egress ACL trending Flows. Information Elements: nf_f_egress_acl_id, plixeraggregatedrecordcount.

Ingress ACL

A grouping of Ingress ACL trending Flows. Information Elements: nf_f_ingress_acl_id, plixeraggregatedrecordcount.

Cisco HSL

Report

Description

Classes

A grouping of Class, Packets trending Bytes. Information Elements: classid, packetdeltacount, octetdeltacount.

Destination-Event

A grouping of Destination, Firewall Event, Extended Event Code, Zone Pair trending Flows. Information Elements: destinationipaddress, firewallevent, fw_ext_event, zonepair_id, plixeraggregatedrecordcount.

Host to Host Events

A grouping of Source, Destination, Firewall Event, Extended Event Code, Zone Pair trending Flows. Information Elements: sourceipaddress, destinationipaddress, firewallevent, fw_ext_event, zonepair_id, plixeraggregatedrecordcount.

Host to Host Events by VRF

A grouping of In VRF, Source, Destination, Out VRF, Firewall Event, Extended Event Code trending Flows. Information Elements: ingressvrfid, sourceipaddress, destinationipaddress, egressvrfid, firewallevent, fw_ext_event, plixeraggregatedrecordcount.

Host to Host with Zone and Class

A grouping of Source, Class, Zone Pair, Destination trending Bytes. Information Elements: sourceipaddress, classid, zonepair_id, destinationipaddress, octetdeltacount.

Source-Event

A grouping of Source, Firewall Event, Extended Event Code, Zone Pair trending Flows. Information Elements: sourceipaddress, firewallevent, fw_ext_event, zonepair_id, plixeraggregatedrecordcount.

Zone Pair

A grouping of Zone Pair trending Bytes. Information Elements: zonepair_id, octetdeltacount.

Zone Pair and Class

A grouping of Zone Pair, Class trending Bytes. Information Elements: zonepair_id, classid, octetdeltacount.

Zone Pair Volume

A grouping of Zone Pair trending Flows. Information Elements: zonepair_id, plixeraggregatedrecordcount.

Cisco IWAN

Report

Description

IWAN Bandwidth Usage

A grouping of Source Site, Path Tag ID, Interface Description trending BW In, Speed In, BW Out, Speed Out. Information Elements: source_site_id, path_tag_id, interfacedescription, egress_bw, ingress_bw, maxof_egress_bw, maxof_ingress_bw.

IWAN Route Changes

A grouping of Site, BR, Path Tag ID, IWAN Circuit trending Routes Changed. Information Elements: source_site_id, ipv4_br_addr, path_tag_id, interfacedescription, plixeraggregatedrecordcount.

IWAN Site to Site Bandwidth

A grouping of BR Router, Src Site, Dst Site, Dst Prefix, Interface ID trending Packets, Avg Bits. Information Elements: ipv4_br_addr, source_site_id, destination_site_id, destination_site_prefix, egressinterface, octetdeltacount, packetdeltacount.

IWAN Traffic Control Alerts

A grouping of Source Site, Destination Site, Interface Description, Interface ID, BR Addr, Path Tag ID, Status trending One way delay, AVG Jitter, PKT Loss, Bytes Lost. Information Elements: source_site_id, destination_site_id, interfacedescription, egressinterface, ipv4_br_addr, path_tag_id, oer_unreach, one_way_delay, rtp_jitter_inter_arrival_mean, trans_pkt_lost_rate, trns_cnt_bytes_lost_rate.

Cisco SLT

Report

Description

Event

A grouping of l2l3switchevent trending Count, Packets, Bytes. Information Elements: l2l3switchevent, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Event-Extevent

A grouping of l2l3switchevent, l2l3switchextevent trending Count, Packets, Bytes. Information Elements: l2l3switchevent, l2l3switchextevent, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Int

A grouping of Exporter, ingressphysicalinterface trending Count, Packets, Bytes. Information Elements: plixerexporter, ingressphysicalinterface, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Int-Vlan-Event

A grouping of Exporter, ingressphysicalinterface, vlanid, l2l3switchevent trending Count, Packets, Bytes. Information Elements: plixerexporter, ingressphysicalinterface, vlanid, l2l3switchevent, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Vlan

A grouping of Exporter, vlanid trending Count, Packets, Bytes. Information Elements: plixerexporter, vlanid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Cisco VQM

Report

Description

Connections eMOS

A grouping of Source, Src Port, Destination, Dest Port trending Frame Rate, eMOS Score. Information Elements: sourceipaddress, sourcetransportport, destinationipaddress, destinationtransportport, videoemosscore, vqmframerate.

Connections eMOS Detail

A grouping of Source, Src Port, Destination, Dest Port trending Frame Rate, eMOS Pkt Lost, eMOS Compression, eMOS Score. Information Elements: sourceipaddress, sourcetransportport, destinationipaddress, destinationtransportport, videoemosscore, vqmemoscompressionbitstream, vqmemospacketlostbitstream, vqmframerate.

Destination eMOS

A grouping of Destination trending Frame Rate, eMOS Score. Information Elements: destinationipaddress, videoemosscore, vqmframerate.

Destination eMOS Detail

A grouping of Destination trending Frame Rate, eMOS Pkt Lost, eMOS Compression, eMOS Score. Information Elements: destinationipaddress, videoemosscore, vqmemoscompressionbitstream, vqmemospacketlostbitstream, vqmframerate.

Host to Host eMOS

A grouping of Source, Destination trending Frame Rate, eMOS Score. Information Elements: sourceipaddress, destinationipaddress, videoemosscore, vqmframerate.

Host to Host eMOS Detail

A grouping of Source, Destination trending Frame Rate, eMOS Pkt Lost, eMOS Compression, eMOS Score. Information Elements: sourceipaddress, destinationipaddress, videoemosscore, vqmemoscompressionbitstream, vqmemospacketlostbitstream, vqmframerate.

Source eMOS

A grouping of Source trending Frame Rate, eMOS Score. Information Elements: sourceipaddress, videoemosscore, vqmframerate.

Source eMOS Detail

A grouping of Source trending Frame Rate, eMOS Pkt Lost, eMOS Compression, eMOS Score. Information Elements: sourceipaddress, videoemosscore, vqmemoscompressionbitstream, vqmemospacketlostbitstream, vqmframerate.

Client Server

Report

Description

Client

A grouping of Client IP trending sum_plxr_client_bytes, sum_plxr_server_bytes. Information Elements: plxr_client_ip, plxr_client_bytes, plxr_server_bytes.

Client Apps

A grouping of Client IP, Application ID trending sum_plxr_client_bytes, sum_plxr_server_bytes. Information Elements: plxr_client_ip, applicationid, plxr_client_bytes, plxr_server_bytes.

Client Server

A grouping of Client IP, Server IP trending sum_plxr_client_bytes, sum_plxr_server_bytes. Information Elements: plxr_client_ip, plxr_server_ip, plxr_client_bytes, plxr_server_bytes.

Client Server Apps

A grouping of Client IP, Application ID, Server IP trending Client, Server. Information Elements: plxr_client_ip, applicationid, plxr_server_ip, plxr_client_bytes, plxr_server_bytes.

Client Server Apps Flags

A grouping of Client IP, Application ID, Server IP trending TCP Flags, Client, Server. Information Elements: plxr_client_ip, applicationid, plxr_server_ip, plxr_client_bytes, plxr_server_bytes, tcpcontrolbits.

Client Server Flags

A grouping of Client IP, Server IP trending TCP Flags, sum_plxr_client_bytes, sum_plxr_server_bytes. Information Elements: plxr_client_ip, plxr_server_ip, plxr_client_bytes, plxr_server_bytes, tcpcontrolbits.

Server

A grouping of Server IP trending sum_plxr_client_bytes, sum_plxr_server_bytes. Information Elements: plxr_server_ip, plxr_client_bytes, plxr_server_bytes.

Server Apps

A grouping of Server IP, Application ID trending sum_plxr_client_bytes, sum_plxr_server_bytes. Information Elements: plxr_server_ip, applicationid, plxr_client_bytes, plxr_server_bytes.

Counts

Report

Description

Clients

A grouping of Client trending Flows. Information Elements: clientipv4address, plixeraggregatedrecordcount.

Destination

A grouping of Destination trending Flows. Information Elements: destinationipaddress, plixeraggregatedrecordcount.

Initiator Group with Dst Port

A grouping of Source IP Group, Well Known Port, Destination IP Group, Destination Port trending Packets, Bytes, Flows. Information Elements: srcipgroup, commonport, dstipgroup, destinationtransportport, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Internal External Destinations

A grouping of Destination trending Unique Hosts. Information Elements: dstinternal, destinationipaddress.

Internal External Pairs

A grouping of Source, Destination trending Unique Srcs, Unique Dsts. Information Elements: srcinternal, dstinternal, destinationipaddress, sourceipaddress.

Internal External Sources

A grouping of Source trending Unique Hosts. Information Elements: srcinternal, sourceipaddress.

Pairs

A grouping of Source, Destination trending Flows. Information Elements: sourceipaddress, destinationipaddress, plixeraggregatedrecordcount.

Pair Source post NAT

A grouping of Source, Src Post NAT, Destination trending Flows. Information Elements: sourceipaddress, postnatsourceipv4address, destinationipaddress, plixeraggregatedrecordcount.

Pair Source post NAT and NAP

A grouping of Source, Src Post NAT, Src Port, Src NAP Port, Dst Port, Destination trending Flows. Information Elements: sourceipaddress, postnatsourceipv4address, sourcetransportport, postnaptsourcetransportport, destinationtransportport, destinationipaddress, plixeraggregatedrecordcount.

Protocol

A grouping of Protocol trending Flows. Information Elements: protocolidentifier, plixeraggregatedrecordcount.

Servers

A grouping of Server trending Flows. Information Elements: serveripv4address, plixeraggregatedrecordcount.

Source

A grouping of Source trending Flows. Information Elements: sourceipaddress, plixeraggregatedrecordcount.

VRFID with NAT and Src

A grouping of In VRFID, NAT Event, NAT Pool Name, Source trending Flows. Information Elements: ingressvrfid, natevent, natpoolname, sourceipaddress, plixeraggregatedrecordcount.

Well Known Port

A grouping of Well Known trending Flows. Information Elements: commonport, plixeraggregatedrecordcount.

Designed Reports

Report

Description

Issue 4657

A grouping of Source IP Address, sourcetransportport, Destination IP Address, destinationtransportport trending avg_connectionapplicationdelay, avg_connectionclienttoserverresponsedelay, avg_connectionnetworktoclientdelay, sum_connectionclientpacketretransmissioncount. Information Elements: sourceipaddress, sourcetransportport, destinationipaddress, destinationtransportport, connectionapplicationdelay, connectionclientpacketretransmissioncount, connectionclienttoserverresponsedelay, connectionnetworktoclientdelay.

Issue 4657a

A grouping of Source IP Address, sourcetransportport, Destination IP Address, destinationtransportport trending avg_connectionapplicationdelay, avg_connectionclienttoserverresponsedelay, avg_connectionnetworktoclientdelay, sum_connectionclientpacketretransmissioncount. Information Elements: sourceipaddress, sourcetransportport, destinationipaddress, destinationtransportport, connectionapplicationdelay, connectionclientpacketretransmissioncount, connectionclienttoserverresponsedelay, connectionnetworktoclientdelay.

Source Packets Size

A grouping of Source IP Address trending Avg. Information Elements: sourceipaddress, avgpacketsize.

Destination Reports

Report

Description

Autonomous System by IP

A grouping of Destination AS trending Packets, Bytes. Information Elements: dstipas, octetdeltacount, packetdeltacount.

Autonomous System by Tag

A grouping of Dst AS trending Packets, Bytes. Information Elements: bgpdestinationasnumber, octetdeltacount, packetdeltacount.

Autonomous System by Tag (Peer)

A grouping of bgpnextadjacentasnumber trending Packets, Bytes. Information Elements: bgpnextadjacentasnumber, octetdeltacount, packetdeltacount.

Countries

A grouping of Destination Country trending Packets, Bytes. Information Elements: dstcountry, octetdeltacount, packetdeltacount.

Countries with AS

A grouping of Dest Country, Dest AS, Hosts (Dst) trending Flows, Packets, Bytes. Information Elements: dstcountry, dstipas, sourceipaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Customer VLAN

A grouping of postdot1qcustomervlanid trending Flows, Packets, Bytes. Information Elements: postdot1qcustomervlanid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Destination w/Flags

A grouping of Destination IP Address, tcpcontrolbits trending Packets, Bytes, Flows. Information Elements: destinationipaddress, tcpcontrolbits, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Dest. IP Groups

A grouping of Destination IP Group trending Packets, Bytes. Information Elements: dstipgroup, octetdeltacount, packetdeltacount.

dot1q VLAN

A grouping of postdot1qvlanid trending Flows, Packets, Bytes. Information Elements: postdot1qvlanid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Dst IP - Src AS

A grouping of Exporter, Destination IP Address, Src AS trending Packets, Bytes. Information Elements: plixerexporter, destinationipaddress, bgpsourceasnumber, octetdeltacount, packetdeltacount.

Host Flows

A grouping of Destination trending Hosts (Source), Packets, Flows. Information Elements: destinationipaddress, packetdeltacount, plixeraggregatedrecordcount, sourceipaddress.

Hosts

A grouping of Destination trending Packets, Bytes. Information Elements: destinationipaddress, octetdeltacount, packetdeltacount.

ICMP

A grouping of Destination, Code, Type trending Count. Information Elements: destinationipaddress, icmpcodeipv4, icmptypeipv4, plixeraggregatedrecordcount.

L2 Octets

A grouping of Destination trending Packets, L2 Octets. Information Elements: destinationipaddress, layer2octetdeltacount, packetdeltacount.

MAC

A grouping of Destination MAC trending Flows, Packets, Bytes. Information Elements: destinationmacaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

MAC L2

A grouping of Destination MAC trending Packets, L2 Octets. Information Elements: destinationmacaddress, layer2octetdeltacount, packetdeltacount.

MAC Sum of Sq

A grouping of Destination MAC trending Packets, Sum of Sq. Octets. Information Elements: destinationmacaddress, octetdeltasumofsquares, packetdeltacount.

Post MAC

A grouping of Post Dst Mac trending Count, Packets, Bytes. Information Elements: postdestinationmacaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Rev 2nd lvl Domains

A grouping of Dst Rev 2nd lvl Domain trending Packets, Bytes. Information Elements: dstdomain, octetdeltacount, packetdeltacount.

Subnets

A grouping of Dst Subnet trending Packets, Bytes. Information Elements: dstnetwork, octetdeltacount, packetdeltacount.

Sum Of Sq. Octets

A grouping of Destination trending Packets, Sum of Sq. Octets. Information Elements: destinationipaddress, octetdeltasumofsquares, packetdeltacount.

User Name by IP

A grouping of Destination, User Name(s) trending Packets, Bytes. Information Elements: destinationipaddress, dstipname, octetdeltacount, packetdeltacount.

Vendor By MAC

A grouping of Destination Vendor trending Devices, Flows, Packets, Bytes. Information Elements: dst_vendor_by_mac, destinationmacaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

VLAN

A grouping of postvlanid trending Flows, Packets, Bytes. Information Elements: postvlanid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Exinda

Report

Description

Application - App Group

A grouping of Exporter, Application, GROUP, TRAFFIC_CLASS trending Avg Srv Del, RTT, NULL. Information Elements: plixerexporter, applicationtag, ex_app_group_name, ex_traffic_class, ex_rtt, ex_server_delay, octetdeltacount.

Application Detail

A grouping of Application trending Avg. AQS, Packets, NULL. Information Elements: applicationtag, ex_aqs, octetdeltacount, packetdeltacount.

Application Group

A grouping of Exporter, GROUP, TRAFFIC_CLASS trending Avg Srv Del, RTT, NULL. Information Elements: plixerexporter, ex_app_group_name, ex_traffic_class, ex_rtt, ex_server_delay, octetdeltacount.

Application Performances

A grouping of Application trending Avg. AQS, Bytes Lost, Nwk. Delay, Srv. Delay, RTT. Information Elements: applicationtag, ex_aqs, ex_bytes_lost, ex_net_delay, ex_rtt, ex_server_delay.

Destination User

A grouping of Exporter, dst_user trending Packets, NULL. Information Elements: plixerexporter, ex_user_id_dst, octetdeltacount, packetdeltacount.

Extra Info

A grouping of Exporter, EXTRA_INFO_ID, TRAFFIC_CLASS trending Bytes Lost, Avg Srv Del, RTT, NULL. Information Elements: plixerexporter, ex_extra_info_id, ex_traffic_class, ex_bytes_lost, ex_rtt, ex_server_delay, octetdeltacount.

Pair by Policy

A grouping of Exporter, Source, Destination, Policy trending Packets, NULL. Information Elements: plixerexporter, sourceipaddress, destinationipaddress, ex_policy_id, octetdeltacount, packetdeltacount.

Pair Latency

A grouping of Source, Destination, TRAFFIC_CLASS trending Avg Srv Del, RTT, NULL. Information Elements: sourceipaddress, destinationipaddress, ex_traffic_class, ex_rtt, ex_server_delay, octetdeltacount.

Pair, Ports and Latency

A grouping of Source, Src Port, Dst Port, Destination trending Avg Srv Del, RTT, NULL. Information Elements: sourceipaddress, sourcetransportport, destinationtransportport, destinationipaddress, ex_rtt, ex_server_delay, octetdeltacount.

Pair VoIP Details

A grouping of Source, Destination, TRAFFIC_CLASS trending Avg. mos, Avg. Refactor, Jitter, NULL. Information Elements: sourceipaddress, destinationipaddress, ex_traffic_class, ex_net_jitter, ex_voip_mos, ex_voip_rfactor, octetdeltacount.

Policies

A grouping of Exporter, ex_policy_id, TRAFFIC_CLASS trending Bytes Lost, Avg Srv Del, RTT, NULL. Information Elements: plixerexporter, ex_policy_id, ex_traffic_class, ex_bytes_lost, ex_rtt, ex_server_delay, octetdeltacount.

Source Latency

A grouping of Source, TRAFFIC_CLASS trending Bytes Lost, Avg Srv Del, RTT, NULL. Information Elements: sourceipaddress, ex_traffic_class, ex_bytes_lost, ex_rtt, ex_server_delay, octetdeltacount.

Source User

A grouping of Exporter, src_user trending Packets, NULL. Information Elements: plixerexporter, ex_user_id_src, octetdeltacount, packetdeltacount.

Source User and Latency

A grouping of Exporter, Source, Src. User, TRAFFIC_CLASS trending Avg Srv Del, RTT, NULL. Information Elements: plixerexporter, sourceipaddress, ex_user_id_src, ex_traffic_class, ex_rtt, ex_server_delay, octetdeltacount.

Source VoIP Details

A grouping of Source, TRAFFIC_CLASS trending Avg. mos, Avg. Refactor, Jitter, NULL. Information Elements: sourceipaddress, ex_traffic_class, ex_net_jitter, ex_voip_mos, ex_voip_rfactor, octetdeltacount.

User to User

A grouping of Exporter, src_user, dst_user trending Packets, NULL. Information Elements: plixerexporter, ex_user_id_src, ex_user_id_dst, octetdeltacount, packetdeltacount.

VOIP Performances

A grouping of Source, Destination trending Avg. mos, Avg. Refactor, Jitter. Information Elements: sourceipaddress, destinationipaddress, ex_net_jitter, ex_voip_mos, ex_voip_rfactor.

FirePOWER

Report

Description

App Internet HTTP Host

A grouping of Application, FS App, HTTP Host trending Flows, Bytes. Information Elements: applicationname, firesight_application, firesight_http_host, octetdeltacount, plixeraggregatedrecordcount.

Application E-Zone & Sub Type

A grouping of Application, FS App, Egress Zone, Event Subtype, Event Type trending Flows. Information Elements: applicationname, firesight_application, firesight_egress_zone, firesight_event_subtype, firesight_event_type, plixeraggregatedrecordcount.

Application I-Zone & Sub Type

A grouping of Application, FS App, Ingress Zone, Event Subtype, Event Type trending Flows. Information Elements: applicationname, firesight_application, firesight_ingress_zone, firesight_event_subtype, firesight_event_type, plixeraggregatedrecordcount.

Firewall List

A grouping of Firewall trending Flows, Packets, Bytes. Information Elements: firesight_sensor_ipv6, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Ingress and Egress Zones

A grouping of Ingress Zone, Egress Zone, Event Type trending Flows. Information Elements: firesight_ingress_zone, firesight_egress_zone, firesight_event_type, plixeraggregatedrecordcount.

User App HTTP Host

A grouping of Source IP, Username, Application, FS App, HTTP Host trending Flows, Bytes. Information Elements: sourceipaddress, username, applicationname, firesight_application, firesight_http_host, octetdeltacount, plixeraggregatedrecordcount.

User App HTTP URL

A grouping of Source IP, Username, Application, FS App, FS URL trending Flows. Information Elements: sourceipaddress, username, applicationname, firesight_application, firesight_http_url, plixeraggregatedrecordcount.

User Application

A grouping of Source IP, Username, Application, FS App trending Flows, Bytes. Information Elements: sourceipaddress, username, applicationname, firesight_application, octetdeltacount, plixeraggregatedrecordcount.

Web App and Source IP

A grouping of Web Application, Application, Source IP trending Flows, Packets, Bytes. Information Elements: firesight_web_application, applicationname, sourceipaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Web App & CoS

A grouping of Web Application, CoS trending Flows, Packets, Bytes. Information Elements: firesight_web_application, ipclassofservice, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Web App Event & Rule Details

A grouping of Web Application, Event Subtype, Event Type, Rule Action, Rule Reason trending Flows. Information Elements: firesight_web_application, firesight_event_subtype, firesight_event_type, firesight_rule_action, firesight_rule_reason, plixeraggregatedrecordcount.

Firewall Events

Report

Description

Destination-Event

A grouping of Destination, Firewall Event trending Flows. Information Elements: destinationipaddress, firewallevent, plixeraggregatedrecordcount.

Destination-Event-Ext

A grouping of Destination, Firewall Event, Extended Event trending Flows. Information Elements: destinationipaddress, firewallevent, nf_f_fw_ext_event, plixeraggregatedrecordcount.

Event-Ext-ACL

A grouping of Firewall Event, Extended Event, Ingress ACL, Egress ACL trending Flows. Information Elements: firewallevent, nf_f_fw_ext_event, nf_f_ingress_acl_id, nf_f_egress_acl_id, plixeraggregatedrecordcount.

Firewall Events

A grouping of Firewall Event trending Count. Information Elements: firewallevent, plixeraggregatedrecordcount.

Firewall Events by Host

A grouping of Source, Firewall Event trending Count. Information Elements: sourceipaddress, firewallevent, plixeraggregatedrecordcount.

Firewall Events Ext

A grouping of FW Event Ext trending Flows. Information Elements: fw_ext_event, plixeraggregatedrecordcount.

Pairs-Event

A grouping of Source, Destination, Firewall Event trending Flows. Information Elements: sourceipaddress, destinationipaddress, firewallevent, plixeraggregatedrecordcount.

Pairs-Event Ext

A grouping of Source, Destination, FW Event Ext trending Flows. Information Elements: sourceipaddress, destinationipaddress, fw_ext_event, plixeraggregatedrecordcount.

Pairs-Event-Ext

A grouping of Source, Destination, Firewall Event, Extended Event trending Flows. Information Elements: sourceipaddress, destinationipaddress, firewallevent, nf_f_fw_ext_event, plixeraggregatedrecordcount.

Protocol-Event

A grouping of Protocol, Firewall Event trending Flows. Information Elements: protocolidentifier, firewallevent, plixeraggregatedrecordcount.

Protocol-Event-Ext

A grouping of Protocol, Firewall Event, Extended Event trending Flows. Information Elements: protocolidentifier, firewallevent, nf_f_fw_ext_event, plixeraggregatedrecordcount.

Source-Event

A grouping of Source, Firewall Event trending Flows. Information Elements: sourceipaddress, firewallevent, plixeraggregatedrecordcount.

Source-Event Ext

A grouping of Source, FW Event Ext trending Flows. Information Elements: sourceipaddress, fw_ext_event, plixeraggregatedrecordcount.

Source-Event-Ext

A grouping of Source, Firewall Event, Extended Event trending Flows. Information Elements: sourceipaddress, firewallevent, nf_f_fw_ext_event, plixeraggregatedrecordcount.

Users-Event

A grouping of Username, Firewall Event trending Flows, Bytes. Information Elements: username, firewallevent, octetdeltacount, plixeraggregatedrecordcount.

Users-Event-Ext

A grouping of Username, Firewall Event, Extended Event trending Flows, Bytes. Information Elements: username, firewallevent, nf_f_fw_ext_event, octetdeltacount, plixeraggregatedrecordcount.

WKP-Event

A grouping of Well Known, Firewall Event trending Flows. Information Elements: commonport, firewallevent, plixeraggregatedrecordcount.

WKP-Event-Ext

A grouping of Well Known, Firewall Event, Extended Event trending Flows. Information Elements: commonport, firewallevent, nf_f_fw_ext_event, plixeraggregatedrecordcount.

FlowPro APM Reports

Report

Description

Application Latency

A grouping of L7 App trending Client, Server, Appl. Information Elements: l7_proto_name, appl_latency_ms, client_nw_delay_ms, server_nw_delay_ms.

App Priority & Latency

A grouping of L7 App, Priority trending Client, Server, Appl. Information Elements: l7_proto_name, ipclassofservice, appl_latency_ms, client_nw_delay_ms, server_nw_delay_ms.

Defined Application Latency

A grouping of Application trending Appl, Client, Server, Packets, Bytes. Information Elements: applicationid, appl_latency_ms, client_nw_delay_ms, octetdeltacount, packetdeltacount, server_nw_delay_ms.

Host Jitter

A grouping of Source trending Pkt Loss, Jitter, Packets, Bytes. Information Elements: sourceipaddress, octetdeltacount, packetdeltacount, rtp_in_jitter, rtp_in_pkt_lost.

Host Jitter By SSRC (Dst)

A grouping of Destination, SSRC, Codec trending Pkt Loss, Jitter, Packets, Bytes. Information Elements: destinationipaddress, rtp_ssrc, rtp_out_payload_type, octetdeltacount, packetdeltacount, rtp_out_jitter, rtp_out_pkt_lost.

Host Jitter By SSRC (Src)

A grouping of Source, SSRC, Codec trending Pkt Loss, Jitter, Packets, Bytes. Information Elements: sourceipaddress, rtp_ssrc, rtp_in_payload_type, octetdeltacount, packetdeltacount, rtp_in_jitter, rtp_in_pkt_lost.

Hosts Latency (Dst)

A grouping of Destination trending Appl, Client, Server, Packets, Bytes. Information Elements: destinationipaddress, appl_latency_ms, client_nw_delay_ms, octetdeltacount, packetdeltacount, server_nw_delay_ms.

Hosts Latency (Src)

A grouping of Source trending Appl, Client, Server, Packets, Bytes. Information Elements: sourceipaddress, appl_latency_ms, client_nw_delay_ms, octetdeltacount, packetdeltacount, server_nw_delay_ms.

Host to Host Jitter All by SSRC

A grouping of Source, Src Payload, SSRC, Destination, Dst Payload trending Src Pkt Loss, Src Jitter, Dst Pkt Loss, Dst Jitter, Packets, Bytes. Information Elements: sourceipaddress, rtp_in_payload_type, rtp_ssrc, destinationipaddress, rtp_out_payload_type, octetdeltacount, packetdeltacount, rtp_in_jitter, rtp_in_pkt_lost, rtp_out_jitter, rtp_out_pkt_lost.

Host to Host Jitter By SSRC/Codec

A grouping of Source, Destination, SSRC, Codec trending Pkt Loss, Jitter, Packets, Bytes. Information Elements: sourceipaddress, destinationipaddress, rtp_ssrc, rtp_in_payload_type, octetdeltacount, packetdeltacount, rtp_in_jitter, rtp_in_pkt_lost.

Host to Host Jitter By SSRC/ToS

A grouping of Source, Destination, SSRC, Type Of Service trending Pkt Loss, Jitter, Packets, Bytes. Information Elements: sourceipaddress, destinationipaddress, rtp_ssrc, ipclassofservice, octetdeltacount, packetdeltacount, rtp_in_jitter, rtp_in_pkt_lost.

Host to Host Latency

A grouping of Source, Destination trending Appl, Client, Server, Packets, Bytes. Information Elements: sourceipaddress, destinationipaddress, appl_latency_ms, client_nw_delay_ms, octetdeltacount, packetdeltacount, server_nw_delay_ms.

Initiator to Responder

A grouping of sip_calling_party, sip_called_party, Codec trending Jitter, Pkt Loss, Packets, Bytes. Information Elements: sip_calling_party, sip_called_party, rtp_in_payload_type, octetdeltacount, packetdeltacount, rtp_in_jitter, rtp_in_pkt_lost.

OOO by Application

A grouping of Application trending Out of Order, RTX, Packets, Octect. Information Elements: applicationid, octetdeltacount, ooorder_in_pkts, packetdeltacount, retransmitted_out_pkts.

OOO Host to Host

A grouping of Source, Destination trending Out of Order, Retransmitted, Packets, Octect. Information Elements: sourceipaddress, destinationipaddress, octetdeltacount, ooorder_in_pkts, packetdeltacount, retransmitted_out_pkts.

Re-transmission By Application

A grouping of Application trending RTX IN, RTX OUT, Packets, Octect. Information Elements: applicationid, octetdeltacount, packetdeltacount, retransmitted_in_pkts, retransmitted_out_pkts.

Re-transmission Host to Host

A grouping of Source, Destination trending RTX IN, RTX OUT, Packets, Octect. Information Elements: sourceipaddress, destinationipaddress, octetdeltacount, packetdeltacount, retransmitted_in_pkts, retransmitted_out_pkts.

Subnet Latency (Dst)

A grouping of Dst Subnet trending Appl, Client, Server, Packets, Bytes. Information Elements: dstnetwork, appl_latency_ms, client_nw_delay_ms, octetdeltacount, packetdeltacount, server_nw_delay_ms.

Subnet Latency (Src)

A grouping of Src Subnet trending Appl, Client, Server, Packets, Bytes. Information Elements: srcnetwork, appl_latency_ms, client_nw_delay_ms, octetdeltacount, packetdeltacount, server_nw_delay_ms.

Subnet to Subnet Latency

A grouping of Src Subnet, Dst Subnet trending Appl, Client, Server, Packets, Bytes. Information Elements: srcnetwork, dstnetwork, appl_latency_ms, client_nw_delay_ms, octetdeltacount, packetdeltacount, server_nw_delay_ms.

Top Applications

A grouping of L7 App trending Packets, Bytes. Information Elements: l7_proto_name, octetdeltacount, packetdeltacount.

Top URLs

A grouping of http_url trending Flows, Packets, Bytes. Information Elements: http_url, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

FlowPro Defender Reports

Report

Description

Alert > All Details

A grouping of Category, Signature, Source, Destination trending Observation Count. Information Elements: nids_category, nids_signature, sourceipaddress, destinationipaddress, plixeraggregatedrecordcount.

Alert > Category

A grouping of Category trending Observation Count. Information Elements: nids_category, plixeraggregatedrecordcount.

Alert > Category & Signature

A grouping of Category, Signature trending Observation Count. Information Elements: nids_category, nids_signature, plixeraggregatedrecordcount.

DNS > Auth

A grouping of Auth Rname trending Observation Count. Information Elements: dns_soa_rname, plixeraggregatedrecordcount.

DNS Client Latency

A grouping of Client trending DNS Requests, Latency. Information Elements: dnsnxclientipv4address, dnsresolvetime, plixeraggregatedrecordcount.

DNS Client / Server Latency

A grouping of Client, Responding DNS Svr trending DNS Requests, Latency. Information Elements: dnsnxclientipv4address, dnsnxserveripv4address, dnsresolvetime, plixeraggregatedrecordcount.

DNS Domain Reputation

A grouping of Source, QName, Resolved Address, DNS Server, Threat Category trending Count. Information Elements: sourceipaddress, dnsname, dnsresolvedipv4address, dnsnxserveripv4address, reputationcategoryid, plixeraggregatedrecordcount.

DNS Exfiltration

A grouping of Source, Destination, QName, DNS Text trending Length, Count. Information Elements: sourceipaddress, destinationipaddress, dnsname, dnstext, dnstextlength, plixeraggregatedrecordcount.

DNS Query Refused

A grouping of Client, DNS Server, FQDN trending Lookup Time. Information Elements: dnsnxclientipv4address, dnsnxserveripv4address, dnsname, flowstartseconds.

DNS > RCodes

A grouping of Rcode trending Observation Count. Information Elements: dnsrcode, plixeraggregatedrecordcount.

DNS Request Latency

A grouping of Client, QName, Resolved to, Responding DNS Svr trending Latency. Information Elements: dnsnxclientipv4address, dnsname, dnsresolvedipv4address, dnsnxserveripv4address, dnsresolvetime.

DNS > Requests

A grouping of Request trending Observation Count. Information Elements: dns_rrname, plixeraggregatedrecordcount.

DNS Request Timeout

A grouping of Client, DNS Query Name trending Count. Information Elements: dnsnxclientipv4address, dnsname, plixeraggregatedrecordcount.

DNS Server Failure

A grouping of Client, DNS Server, FQDN trending Lookup Time. Information Elements: dnsnxclientipv4address, dnsnxserveripv4address, dnsname, flowstartseconds.

DNS Server Latency

A grouping of Responding DNS Svr trending DNS Requests, Latency. Information Elements: dnsnxserveripv4address, dnsresolvetime, plixeraggregatedrecordcount.

DNS Server Responding Details

A grouping of DNS Server, Client, FQDN, Resolved Address trending Resolve Count. Information Elements: dnsnxserveripv4address, dnsnxclientipv4address, dnsname, dnsresolvedipv4address, plixeraggregatedrecordcount.

DNS Server Responding Summary

A grouping of DNS Server trending Number of Clients, Unique Lookup Count, Minimum Resolution Time. Information Elements: dnsnxserveripv4address, dnsnxclientipv4address, dnsresolvetime, plixeraggregatedrecordcount.

File Info > All File Details

A grouping of Source, Destination, File Name, MD5 Checksum, SHA256 Checksum trending Bytes. Information Elements: sourceipaddress, destinationipaddress, filename, md5_file_checksum, sha256_file_checksum, file_size_octets.

File Info > CheckSums

A grouping of MD5 Checksum, SHA256 Checksum trending File Size. Information Elements: md5_file_checksum, sha256_file_checksum, file_size_octets.

File Info > Filename & CheckSums

A grouping of File Name, MD5 Checksum, SHA256 Checksum trending File Size. Information Elements: filename, md5_file_checksum, sha256_file_checksum, file_size_octets.

HTTP > All Details

A grouping of Source, Destination, Request Host, Request Target, User Agent, Content Type, Request Method, Status Code trending Total Payload. Information Elements: sourceipaddress, destinationipaddress, httprequesthost, httprequesttarget, httpuseragent, httpcontenttype, httprequestmethod, httpstatuscode, ippayloadlength.

HTTP > Content Type

A grouping of Content Type, Request Method, Status Code trending Total Payload. Information Elements: httpcontenttype, httprequestmethod, httpstatuscode, ippayloadlength.

HTTP > Request Target

A grouping of Request Target trending Total Payload. Information Elements: httprequesttarget, ippayloadlength.

HTTP > User Agent

A grouping of User Agent trending Observation Count. Information Elements: httpuseragent, plixeraggregatedrecordcount.

NX-FQDN

A grouping of FQDN trending DNS Clients, Resolve Count. Information Elements: dnsnxqname, dnsnxclientipv4address, plixeraggregatedrecordcount.

SMB > File Details

A grouping of Source, Destination, Command, Status, File Name, Operation, Permissions, Accessed, Modified, File Size trending Observed Count. Information Elements: sourceipaddress, destinationipaddress, smb_command, smb_status, smb_filename, smb_disposition, smb_access, smb_accessed_time, smb_modified_time, smb_file_size, plixeraggregatedrecordcount.

SMB > NTLMSSP Authentication Details

A grouping of Source, Destination, User, Host, Domain, Status, Version trending Observed Count. Information Elements: sourceipaddress, destinationipaddress, smb_ntlmssp_user, smb_ntlmssp_host, smb_ntlmssp_domain, smb_status, smb_ntlmssp_version, plixeraggregatedrecordcount.

SNMP > All Details

A grouping of Community, User, Vars, PDU Type trending Observation Count. Information Elements: mrtgsnmpcommunity, snmp_usm, snmp_var, snmp_pdu_type, plixeraggregatedrecordcount.

SNMP > Community

A grouping of Community trending Observation Count. Information Elements: mrtgsnmpcommunity, plixeraggregatedrecordcount.

SNMP > PDU Type

A grouping of PDU Type trending Observation Count. Information Elements: snmp_pdu_type, plixeraggregatedrecordcount.

SNMP > User

A grouping of User trending Observation Count. Information Elements: snmp_usm, plixeraggregatedrecordcount.

SNMP > Version

A grouping of Version trending Observation Count. Information Elements: mrtgsnmpversion, plixeraggregatedrecordcount.

Src and # of DNS servers

A grouping of Client, User Name(s) trending # of DNS servers. Information Elements: dnsnxclientipv4address, dnsclientname, dnsnxserveripv4address.

Src and # of NX 2LD

A grouping of Client, User Name(s), DNS Server trending NX Replies. Information Elements: dnsnxclientipv4address, dnsclientname, dnsnxserveripv4address, dnsqname2ld.

Src and # of NX 3LD

A grouping of Client, User Name(s), DNS Server trending NX Replies. Information Elements: dnsnxclientipv4address, dnsclientname, dnsnxserveripv4address, dnsqname3ld.

Src and # of NX Replies

A grouping of Client, User Name(s) trending NX Responses. Information Elements: dnsnxclientipv4address, dnsclientname, dnsnxqname.

Src with NX 2LD

A grouping of Client, User Name(s), 2nd Level Domain, DNS Server trending Count. Information Elements: dnsnxclientipv4address, dnsclientname, dnsqname2ld, dnsnxserveripv4address, plixeraggregatedrecordcount.

Src with NX 3LD

A grouping of Client, User Name(s), 3rd Level Domain, DNS Server trending Count. Information Elements: dnsnxclientipv4address, dnsclientname, dnsqname3ld, dnsnxserveripv4address, plixeraggregatedrecordcount.

Src with NX FQDN

A grouping of Client, User Name(s), DNS Query Name, DNS Server trending Count. Information Elements: dnsnxclientipv4address, dnsclientname, dnsnxqname, dnsnxserveripv4address, plixeraggregatedrecordcount.

Top 2LD Requests

A grouping of 2nd Level Domains trending Clients Requesting, Resolve Count. Information Elements: request2ld, dnsnxclientipv4address, dnsresolvedipv4address.

Top 3LD Requests

A grouping of 3rd Level Domains trending Clients Requesting, Resolve Count. Information Elements: request3ld, dnsnxclientipv4address, dnsresolvedipv4address.

FQDN Reports

Report

Description

Destination FQDN

A grouping of Destination, FQDN trending Lookups. Information Elements: destinationipaddress, dst_fqdn, fqdn_lookup_count.

Host to Host with Dst FQDN

A grouping of Source, Destination, Dst FQDN trending Lookup. Information Elements: sourceipaddress, destinationipaddress, dst_fqdn, fqdn_lookup_count.

Gigamon

Report

Description

App Intel - DNS

A grouping of App, Src IP, Dst IP, Query, Response, Query Type trending Count. Information Elements: applicationid, sourceipaddress, destinationipaddress, dnsqueryname, gigamondnsresponseipv4address, gm_dns_networkservice_host_type, plixeraggregatedrecordcount.

App Intel - FTP

A grouping of App, Src IP, Dst IP, Filename, User, Pass, File Size trending Bytes. Information Elements: applicationid, sourceipaddress, destinationipaddress, gm_ftp_fileserver_filename, gm_ftp_fileserver_login, gm_ftp_fileserver_password, gm_ftp_fileserver_filesize, octetdeltacount.

App Intel - HTTP

A grouping of App, Src IP, Dst IP, User Agent, HTTP Method, Host, URI, Referrer, User Agent trending Bytes. Information Elements: applicationid, sourceipaddress, destinationipaddress, httpuseragent, gm_http_web_method, gm_http_web_host, gm_http_web_uri, gm_http_web_referer, httpstatuscode, octetdeltacount.

App Intel - SMB

A grouping of App, Src IP, Dst IP, File, SMB Version, NTLM User, NTLM Workstation trending Bytes. Information Elements: applicationid, sourceipaddress, destinationipaddress, gm_smb_fileserver_filename, gm_smb_fileserver_version, gm_smb_fileserver_ntlm_user, gm_smb_fileserver_ntlm_workstation, octetdeltacount.

App Intel - SMTP

A grouping of App, Src IP, Dst IP, Recipient, Sender, Subject, Attachment trending Bytes. Information Elements: applicationid, sourceipaddress, destinationipaddress, gm_smtp_mail_receiver, gm_smtp_mail_sender, gm_smtp_mail_subject, gm_smtp_mail_attach_filename, octetdeltacount.

Destination Name and URL

A grouping of Destination, User Name(s), URL trending Count. Information Elements: destinationipaddress, dstipname, gigamonhttprequrl, plixeraggregatedrecordcount.

DNS All Details

A grouping of Src IP, Dst IP, DNS Request, IP Returned, Authority Name trending Count. Information Elements: sourceipaddress, destinationipaddress, dnsqueryname, gigamondnsresponseipv4address, gigamondnsauthorityname, plixeraggregatedrecordcount.

Hosts with URL

A grouping of Src IP, Destination, URL trending Count. Information Elements: sourceipaddress, destinationipaddress, gigamonhttprequrl, plixeraggregatedrecordcount.

Pair Names and URL

A grouping of Source, Source Username, Destination, Destination Username, URL trending Count. Information Elements: sourceipaddress, srcipname, destinationipaddress, dstipname, gigamonhttprequrl, plixeraggregatedrecordcount.

Return Codes

A grouping of Return Code trending Count. Information Elements: gigamonhttprspstatus, plixeraggregatedrecordcount.

Source Name and URL

A grouping of Source, User Name(s), URL trending Count. Information Elements: sourceipaddress, srcipname, gigamonhttprequrl, plixeraggregatedrecordcount.

SSL All Details

A grouping of Src IP, Dst IP, SSL Version, SSL Cipher, SSL Algorithm, SSL Key Size, SSL Cert Subject, Expiry Date trending Count. Information Elements: sourceipaddress, destinationipaddress, sslserverversion, sslservercipher, sslcertificatesubjectpubalgorithm, sslcertificatesubjectpubkeysize, sslcertificatesubject, sslcertificatevalidnotafter, plixeraggregatedrecordcount.

SSL Version Count

A grouping of SSL Version trending Server Count. Information Elements: sslserverversion, destinationipaddress.

URL and Return Codes

A grouping of URL, Return Code trending Count. Information Elements: gigamonhttprequrl, gigamonhttprspstatus, plixeraggregatedrecordcount.

URL Count

A grouping of URL trending Count. Information Elements: gigamonhttprequrl, plixeraggregatedrecordcount.

Honeynet

Report

Description

Adversary and State

A grouping of Adversary, State trending Count. Information Elements: sourceipaddress, connectionstate, plixeraggregatedrecordcount.

Adversary and String

A grouping of Adversary, String trending Count. Information Elements: sourceipaddress, comments, plixeraggregatedrecordcount.

Adversary, String and State

A grouping of Adversary, String, State trending Count. Information Elements: sourceipaddress, comments, connectionstate, plixeraggregatedrecordcount.

Forensic with Start

A grouping of Start Time, Source, String, State trending Count. Information Elements: flowstartmilliseconds, sourceipaddress, comments, connectionstate, plixeraggregatedrecordcount.

State

A grouping of State trending Count. Information Elements: connectionstate, plixeraggregatedrecordcount.

Strings

A grouping of String trending Count. Information Elements: comments, plixeraggregatedrecordcount.

Strings and State

A grouping of String, State trending Count. Information Elements: comments, connectionstate, plixeraggregatedrecordcount.

HTTP

Report

Description

Host to Host Request Volume

A grouping of Source, Destination trending Requests, Packets, Bytes. Information Elements: httprequesthost, destinationipaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

HTTP User Agent

A grouping of Source, User Agent trending Flow Count, Bytes. Information Elements: httprequesthost, httpuseragent, octetdeltacount, plixeraggregatedrecordcount.

User Agent

A grouping of pm_cisco_httpuseragent trending Count, Packets, Bytes. Information Elements: pm_cisco_httpuseragent, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Juniper

Report

Description

Application Performance

A grouping of Application trending Uplink Pkts, Downlink Pkts, Retrans Uplink, Retrans Downlink, Smooth RTT Up, Smooth RTT Down. Information Elements: applicationname, downlinkpackets, retranstcppacketsdownlink, retranstcppacketsuplink, smoothrttdownlink, smoothrttuplink, uplinkpackets.

Host and Num Inst

A grouping of Host, Num Inst 1, Num Inst 2, Num Inst 3, Num Inst 4, Num Inst 5 trending Flows. Information Elements: host, numinstances_1, numinstances_2, numinstances_3, numinstances_4, numinstances_5, plixeraggregatedrecordcount.

Host and Status Code

A grouping of Host, Status Code 1, Status Code 2, Status Code 3, Status Code 4, Status Code 5 trending Flows. Information Elements: host, statuscode_1, statuscode_2, statuscode_3, statuscode_4, statuscode_5, plixeraggregatedrecordcount.

Host DNS Response Time

A grouping of Source trending Flows, Max DNS Resp., Avg DNS Resp.. Information Elements: host, dnsresponsetime, plixeraggregatedrecordcount.

HTTP Details

A grouping of Host, Method, Referrer, Response Code, URI trending Flows. Information Elements: host, http_method, http_referrer, http_responsecode, http_uri, plixeraggregatedrecordcount.

HTTP Method

A grouping of HTTP Method trending Uplink Pkts, Downlink Pkts, Uplink Octets, Downlink Octets, Flows. Information Elements: http_method, downlinkoctets, downlinkpackets, plixeraggregatedrecordcount, uplinkoctets, uplinkpackets.

HTTP Referrer

A grouping of HTTP Referrer trending Uplink Pkts, Downlink Pkts, Uplink Octets, Downlink Octets, Flows. Information Elements: http_referrer, downlinkoctets, downlinkpackets, plixeraggregatedrecordcount, uplinkoctets, uplinkpackets.

HTTP Response Code

A grouping of Response Code trending Uplink Pkts, Downlink Pkts, Uplink Octets, Downlink Octets, Flows. Information Elements: http_responsecode, downlinkoctets, downlinkpackets, plixeraggregatedrecordcount, uplinkoctets, uplinkpackets.

HTTP URI

A grouping of URI trending Uplink Pkts, Downlink Pkts, Uplink Octets, Downlink Octets, Flows. Information Elements: http_uri, downlinkoctets, downlinkpackets, plixeraggregatedrecordcount, uplinkoctets, uplinkpackets.

IFL and Subscriber Details

A grouping of IFL Name, IP Address, Name, Type, VRF trending Flows, UL Pkts, DL Pkts, UL Octets, DL Octets. Information Elements: iflname, subscriberipaddress, subscribername, subscribertype, subscribervrf, downlinkoctets, downlinkpackets, plixeraggregatedrecordcount, uplinkoctets, uplinkpackets.

IFL Name and Counters

A grouping of IFL Name trending Plixer Flows, Uplink Pkts, DL Pkts, Uplink Octets, DL Octets. Information Elements: iflname, downlinkoctets, downlinkpackets, plixeraggregatedrecordcount, uplinkoctets, uplinkpackets.

NAS Details

A grouping of IP Address, Port ID, Port Type trending UL Pkts, DL Pkts, UL Octets, DL Octets, Flows. Information Elements: nasipaddress, nasportid, nasporttype, downlinkoctets, downlinkpackets, plixeraggregatedrecordcount, uplinkoctets, uplinkpackets.

Pair RTT IPv4

A grouping of Src IP, Dst IP trending Retrans UL, Retrans DL, Smooth RTT UL, Smooth RTT DL. Information Elements: sourceipaddress, destinationipaddress, retranstcppacketsdownlink, retranstcppacketsuplink, smoothrttdownlink, smoothrttuplink.

Pair RTT IPv6

A grouping of Src IP, Dst IP trending Retrans UL, Retrans DL, Smooth RTT UL, Smooth RTT DL. Information Elements: sourceipv6address, destinationipv6address, retranstcppacketsdownlink, retranstcppacketsuplink, smoothrttdownlink, smoothrttuplink.

Pair & User NameIPv4

A grouping of Src IP, Dst IP, User Name trending UL Pkts, DL Pkts, UL Octets, DL Octets, Flows. Information Elements: sourceipaddress, destinationipaddress, username, downlinkoctets, downlinkpackets, plixeraggregatedrecordcount, uplinkoctets, uplinkpackets.

Pair & User NameIPv6

A grouping of Src IPv6, Dst IPv6, User Name trending UL Pkts, DL Pkts, UL Octets, DL Octets, Flows. Information Elements: sourceipv6address, destinationipv6address, username, downlinkoctets, downlinkpackets, plixeraggregatedrecordcount, uplinkoctets, uplinkpackets.

Record Reason

A grouping of Record Reason trending Uplink Pkts, Downlink Pkts, Uplink Octets, Downlink Octets. Information Elements: recordreason, downlinkoctets, downlinkpackets, uplinkoctets, uplinkpackets.

SCGBND IP Address

A grouping of SCG/BNG IP trending Uplink Pkts, Downlink Pkts, Uplink Octets, Downlink Octets. Information Elements: scgbngipaddress, downlinkoctets, downlinkpackets, uplinkoctets, uplinkpackets.

Subscriber VRF and User Details

A grouping of Subscriber, VRF, User Name trending UL Pkts, DL Pkts, UL Octets, DL Octets, Flows. Information Elements: subscribername, subscribervrf, username, downlinkoctets, downlinkpackets, plixeraggregatedrecordcount, uplinkoctets, uplinkpackets.

Keysight Reports

Report

Description

App with Latency

A grouping of Application trending RTT, Bytes. Information Elements: applicationid, latency, octetdeltacount.

Browsers

A grouping of Browser trending Packets, Bytes. Information Elements: browsername, octetdeltacount, packetdeltacount.

Connections with Latency

A grouping of Source IP, Source Port, Destination IP, Destination Port trending RTT. Information Elements: sourceipaddress, sourcetransportport, destinationipaddress, destinationtransportport, latency.

Conversation App Latency

A grouping of Source IP, Application, Destination IP trending RTT, Bytes. Information Elements: sourceipaddress, applicationid, destinationipaddress, latency, octetdeltacount.

Device and Location

A grouping of OS Name, Source, City, Country trending Packets, Bytes. Information Elements: osdevicename, sourceipaddress, sourcecityname, sourcecountryname, octetdeltacount, packetdeltacount.

Encryption

A grouping of Source, Destination, connencrypttype, encryptioncipher, encryptionkeylength trending Packets, octets. Information Elements: sourceipaddress, destinationipaddress, connencrypttype, encryptioncipher, encryptionkeylength, octetdeltacount, packetdeltacount.

L7 Application

A grouping of L7 Application trending Packets, Bytes, Flows. Information Elements: l7applicationname, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

OS

A grouping of OS Name trending Packets, Bytes. Information Elements: osdevicename, octetdeltacount, packetdeltacount.

OS Device Name

A grouping of OS Name, Source trending Packets, Bytes. Information Elements: osdevicename, sourceipaddress, octetdeltacount, packetdeltacount.

Source City

A grouping of City trending Packets, Bytes. Information Elements: sourcecityname, octetdeltacount, packetdeltacount.

Source Country

A grouping of Country trending Packets, Bytes. Information Elements: sourcecountryname, octetdeltacount, packetdeltacount.

NAT

Report

Description

All Details

A grouping of Source, Src Port, NAT Src IP, NAT Src Port, NAT Dst Port, NAT Dst IP, Dst Port, Destination trending Flows, Bytes. Information Elements: sourceipaddress, sourcetransportport, postnatsourceipv4address, postnaptsourcetransportport, postnaptdestinationtransportport, postnatdestinationipv4address, destinationtransportport, destinationipaddress, octetdeltacount, plixeraggregatedrecordcount.

Destination Details

A grouping of Destination, Dst Port, NAT Dst IP, NAT Dst Port trending Flows, Bytes. Information Elements: destinationipaddress, destinationtransportport, postnatdestinationipv4address, postnaptdestinationtransportport, octetdeltacount, plixeraggregatedrecordcount.

Dst Translations

A grouping of Destination, Post Dst IP trending Packets, Bytes. Information Elements: destinationipaddress, postnatdestinationipv4address, octetdeltacount, packetdeltacount.

Post Connections

A grouping of in Int, Post Src Port, Post Src IP, Post Dst IP, post , out Int trending Packets, Bytes. Information Elements: ingressinterface, postnaptsourcetransportport, postnatsourceipv4address, postnatdestinationipv4address, postnaptdestinationtransportport, egressinterface, octetdeltacount, packetdeltacount.

Post Host to Host

A grouping of in Int, Post Src IP, Post Dst IP, out Int trending Packets, Bytes. Information Elements: ingressinterface, postnatsourceipv4address, postnatdestinationipv4address, egressinterface, octetdeltacount, packetdeltacount.

Source Details

A grouping of Source, Src Port, NAT Src Port, NAT Src IP trending Flows, Bytes. Information Elements: sourceipaddress, sourcetransportport, postnaptsourcetransportport, postnatsourceipv4address, octetdeltacount, plixeraggregatedrecordcount.

Src Translations

A grouping of Source, Post Src IP trending Packets, Bytes. Information Elements: sourceipaddress, postnatsourceipv4address, octetdeltacount, packetdeltacount.

Translations

A grouping of Source, Destination, Post Src IP, Post Dst IP trending Packets, Bytes. Information Elements: sourceipaddress, destinationipaddress, postnatsourceipv4address, postnatdestinationipv4address, octetdeltacount, packetdeltacount.

NBAR Reports

Report

Description

Application Categories

A grouping of Application Category trending Packets, Bytes. Information Elements: ciscoappcategoryname, octetdeltacount, packetdeltacount.

Application Compression

A grouping of Application trending % Pkt Comp, % Octet Comp. Information Elements: applicationtag, percentoctetcompression, percentpacketcompression.

Application Groups

A grouping of Application Group trending Packets, Bytes. Information Elements: ciscoappgroupname, octetdeltacount, packetdeltacount.

Applications

A grouping of Application trending Packets, Bytes. Information Elements: applicationtag, octetdeltacount, packetdeltacount.

Application Sub Categories

A grouping of Application Sub Category trending Packets, Bytes. Information Elements: ciscosubappcategoryname, octetdeltacount, packetdeltacount.

Conversations

A grouping of Source, Application, Destination trending Packets, Bytes. Information Elements: sourceipaddress, applicationtag, destinationipaddress, octetdeltacount, packetdeltacount.

Overlay Network

Report

Description

Destination Hosts by Network

A grouping of Network ID, Network Type, Destination trending Count, Packets, Bytes. Information Elements: overlay_net_id, overlay_net_type, destinationipaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Network ID and Type

A grouping of Network ID, Network Type trending Count, Packets, Bytes. Information Elements: overlay_net_id, overlay_net_type, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Source Hosts by Network

A grouping of Network ID, Network Type, Source trending Count, Packets, Bytes. Information Elements: overlay_net_id, overlay_net_type, sourceipaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Pair Reports

Report

Description

AS to AS by IP

A grouping of Source AS, Destination AS trending Packets, Bytes. Information Elements: srcipas, dstipas, octetdeltacount, packetdeltacount.

AS to AS by Tag

A grouping of Src AS, Dst AS trending Packets, Bytes. Information Elements: bgpsourceasnumber, bgpdestinationasnumber, octetdeltacount, packetdeltacount.

AS to AS by Tag (Peer)

A grouping of bgpprevadjacentasnumber, bgpnextadjacentasnumber trending Packets, Bytes. Information Elements: bgpprevadjacentasnumber, bgpnextadjacentasnumber, octetdeltacount, packetdeltacount.

Avg Pkt Size

A grouping of Source, Destination trending Avg. Pkt. Size, Packets, NULL. Information Elements: sourceipaddress, destinationipaddress, avgpacketsize, octetdeltacount, packetdeltacount.

Client to Server

A grouping of Client, Server trending Packets, Bytes. Information Elements: clientipv4address, serveripv4address, octetdeltacount, packetdeltacount.

Connections By Bytes

A grouping of src Port, Source, Protocol, Destination, dst Port trending Packets, Bytes. Information Elements: sourcetransportport, sourceipaddress, protocolidentifier, destinationipaddress, destinationtransportport, octetdeltacount, packetdeltacount.

Connections By Flows

A grouping of src Port, Source, Protocol, Destination, dst Port trending Flows. Information Elements: sourcetransportport, sourceipaddress, protocolidentifier, destinationipaddress, destinationtransportport, plixeraggregatedrecordcount.

Connections w/ Obsrv Pt.

A grouping of Source, src Port, Destination, dst Port, Obsrv Pt trending Packets, Sum of Sq. Octets. Information Elements: sourceipaddress, sourcetransportport, destinationipaddress, destinationtransportport, observationpointid, octetdeltasumofsquares, packetdeltacount.

Conversations App

A grouping of Source, Application, Destination trending Packets, Bytes. Information Elements: sourceipaddress, applicationid, destinationipaddress, octetdeltacount, packetdeltacount.

Conversations w/Flags

A grouping of Source IP Address, Well Known Port, tcpcontrolbits, Destination IP Address trending Packets, Bytes, Flows. Information Elements: sourceipaddress, commonport, tcpcontrolbits, destinationipaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Conversations WKP

A grouping of Source, Well Known, Destination trending Packets, Bytes. Information Elements: sourceipaddress, commonport, destinationipaddress, octetdeltacount, packetdeltacount.

Conv IP Groups

A grouping of Source IP Group, Well Known, Destination IP Group trending Packets, Bytes. Information Elements: srcipgroup, commonport, dstipgroup, octetdeltacount, packetdeltacount.

Country to Country

A grouping of Source Country, Destination Country trending Packets, Bytes. Information Elements: srccountry, dstcountry, octetdeltacount, packetdeltacount.

Customer VLAN to VLAN

A grouping of postdot1qcustomervlanid, dot1qcustomervlanid trending Flows, Packets, Bytes. Information Elements: postdot1qcustomervlanid, dot1qcustomervlanid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

dot1q VLAN to VLAN

A grouping of postdot1qvlanid, dot1qvlanid trending Flows, Packets, Bytes. Information Elements: postdot1qvlanid, dot1qvlanid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Flow End Reason

A grouping of Source, Src Port, Dst Port, Destination, Flow End Reason trending Packets, Bytes. Information Elements: sourceipaddress, sourcetransportport, destinationtransportport, destinationipaddress, flowendreason, octetdeltacount, packetdeltacount.

Forensic Audit

A grouping of Flow Start, Source, Destination, Common Port, Protocol trending Pkts, Bytes. Information Elements: flowstartmilliseconds, sourceipaddress, destinationipaddress, commonport, protocolidentifier, octetdeltacount, packetdeltacount.

Grouped Flows (DSCP)

A grouping of src Port, Source, DSCP, Destination, dst Port trending Packets, Bytes. Information Elements: sourcetransportport, sourceipaddress, ipdiffservcodepoint, destinationipaddress, destinationtransportport, octetdeltacount, packetdeltacount.

Grouped Flows (TOS)

A grouping of src Port, Source, Type Of Service, Destination, dst Port trending Packets, Bytes. Information Elements: sourcetransportport, sourceipaddress, ipclassofservice, destinationipaddress, destinationtransportport, octetdeltacount, packetdeltacount.

Host - AS by IP - Host

A grouping of Source, Src AS, Dst AS, Destination trending Flows, Packets, Bytes. Information Elements: sourceipaddress, srcipas, dstipas, destinationipaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Host - AS - Host

A grouping of Source, Src AS, Dst AS, Destination trending Flows, Packets, Bytes. Information Elements: sourceipaddress, bgpsourceasnumber, bgpdestinationasnumber, destinationipaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Hosts with Country

A grouping of Source, Source Country, Destination, Destination Country trending Packets, Bytes. Information Elements: sourceipaddress, srccountry, destinationipaddress, dstcountry, octetdeltacount, packetdeltacount.

Host to Host

A grouping of Source, Destination trending Packets, Bytes. Information Elements: sourceipaddress, destinationipaddress, octetdeltacount, packetdeltacount.

Host to Host ICMP

A grouping of Source, Code, Type, Destination trending Count. Information Elements: sourceipaddress, icmpcodeipv4, icmptypeipv4, destinationipaddress, plixeraggregatedrecordcount.

Host to Host L2

A grouping of Source, Destination trending Packets, L2 Octets. Information Elements: sourceipaddress, destinationipaddress, layer2octetdeltacount, packetdeltacount.

Host to Host Sum of Sq.

A grouping of Source, Destination trending Packets, Sum of Sq. Octets. Information Elements: sourceipaddress, destinationipaddress, octetdeltasumofsquares, packetdeltacount.

Host to Host w/Flags

A grouping of Source IP Address, tcpcontrolbits, Destination IP Address trending Packets, Bytes, Flows. Information Elements: sourceipaddress, tcpcontrolbits, destinationipaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Host To Host With Next Hop

A grouping of Source, Destination, Next Hop trending packet, octect. Information Elements: sourceipaddress, destinationipaddress, ipnexthopipv4address, octetdeltacount, packetdeltacount.

IP Groups with Apps Defined

A grouping of Src Group, Protocol, Application, Dst Group trending Packets, Bytes. Information Elements: srcipgroup, protocolidentifier, applicationid, dstipgroup, octetdeltacount, packetdeltacount.

IP Group to IP Group

A grouping of Source IP Group, Destination IP Group trending Packets, Bytes. Information Elements: srcipgroup, dstipgroup, octetdeltacount, packetdeltacount.

MAC to MAC Routed

A grouping of Source MAC, Post Source MAC, Destination MAC, Post Destination MAC trending Flows, Packets, Bytes. Information Elements: sourcemacaddress, postsourcemacaddress, destinationmacaddress, postdestinationmacaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

MAC to MAC Switched

A grouping of Source MAC, Destination MAC trending Packets, Bytes. Information Elements: sourcemacaddress, destinationmacaddress, octetdeltacount, packetdeltacount.

Rev 2nd lvl Domain pairs

A grouping of Src Rev 2nd lvl Domain, Dst Rev 2nd lvl Domain trending Packets, Bytes. Information Elements: srcdomain, dstdomain, octetdeltacount, packetdeltacount.

Subnet to Subnet

A grouping of Src Subnet, Dst Subnet trending Packets, Bytes. Information Elements: srcnetwork, dstnetwork, octetdeltacount, packetdeltacount.

TOS to TOS

A grouping of Type of Service, Post Type of Services trending Packets, Bytes. Information Elements: ipclassofservice, postipclassofservice, octetdeltacount, packetdeltacount.

VLAN to VLAN

A grouping of postvlanid, vlanid trending Flows, Packets, Bytes. Information Elements: postvlanid, vlanid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Palo Alto Networks

Report

Description

Applications

A grouping of appid_pa trending Packets, Bytes. Information Elements: appid_pa, octetdeltacount, packetdeltacount.

CloudGenix Exporter Path Stats

A grouping of Exporter, Path ID trending Down Jitter, Up Jitter, Down Loss, Up Loss, Down MOS, Up MOS, RTT Latency. Information Elements: plixerexporter, cgnxlqmpathidentifier, cgnxlqmdownlinkjittermilliseconds, cgnxlqmdownlinkmos, cgnxlqmdownlinkpacketloss, cgnxlqmrttlatencymilliseconds, cgnxlqmuplinkjittermilliseconds, cgnxlqmuplinkmos, cgnxlqmuplinkpacketloss.

CloudGenix Path Stats

A grouping of Path ID trending Down Jitter, Up Jitter, Down Loss, Up Loss, Down MOS, Up MOS, RTT Latency. Information Elements: cgnxlqmpathidentifier, cgnxlqmdownlinkjittermilliseconds, cgnxlqmdownlinkmos, cgnxlqmdownlinkpacketloss, cgnxlqmrttlatencymilliseconds, cgnxlqmuplinkjittermilliseconds, cgnxlqmuplinkmos, cgnxlqmuplinkpacketloss.

Users

A grouping of userid_pa trending Packets, Bytes. Information Elements: userid_pa, octetdeltacount, packetdeltacount.

Procera Reports

Report

Description

APN and Base Service

A grouping of Access Point Name, Base Service trending Bytes. Information Elements: proceraapn, procerabaseservice, octetdeltacount.

Base Service RTT

A grouping of Base Service trending Internal RTT, External RTT. Information Elements: procerabaseservice, proceraexternalrtt, procerainternalrtt.

Content Categories

A grouping of Content Categories trending External RTT, Bytes. Information Elements: proceracontentcategories, octetdeltacount, proceraexternalrtt.

HTTP Content Type, Language, and Location

A grouping of Content Type, Language, Location trending Bytes. Information Elements: procerahttpcontenttype, procerahttplanguage, procerahttplocation, octetdeltacount.

HTTP Location, Referrer, and Request Method

A grouping of Location, referer, Request Method trending Bytes. Information Elements: procerahttplocation, procerahttpreferer, procerahttprequestmethod, octetdeltacount.

HTTP URL, Response Status, User Agent

A grouping of procerahttpurl, Response Status, User Agent trending Bytes. Information Elements: procerahttpurl, procerahttpresponsestatus, procerahttpuseragent, octetdeltacount.

Incoming Destination Details

A grouping of Destination IP Address trending Drops, Latency, Packets, Bytes. Information Elements: destinationipaddress, proceraincomingoctets, proceraincomingpackets, proceraincomingshapingdrops, proceraincomingshapinglatency.

Incoming Source Details

A grouping of Source IP Address trending Drops, Latency, Packets, Bytes. Information Elements: sourceipaddress, proceraincomingoctets, proceraincomingpackets, proceraincomingshapingdrops, proceraincomingshapinglatency.

Outgoing Destination Details

A grouping of Destination IP Address trending Drops, Latency, Packets, Bytes. Information Elements: destinationipaddress, proceraoutgoingoctets, proceraoutgoingpackets, proceraoutgoingshapingdrops, proceraoutgoingshapinglatency.

Outgoing Source Details

A grouping of Source IP Address trending Drops, Latency, Packets, Bytes. Information Elements: sourceipaddress, proceraoutgoingoctets, proceraoutgoingpackets, proceraoutgoingshapingdrops, proceraoutgoingshapinglatency.

Property and Service

A grouping of property, service trending In Ext. Qoe, In Int. Qoe, Out Ext. Qoe, Out Int. Qoe, Bytes. Information Elements: proceraproperty, proceraservice, octetdeltacount, proceraqoeincomingexternal, proceraqoeincominginternal, proceraqoeoutgoingexternal, proceraqoeoutgoinginternal.

Queue Drops

Report

Description

Queue Drops By Hierarchy

A grouping of Policy Map Hierarchy, Policy QoS Queue Index trending Flows, Q Drops. Information Elements: policymaphierarchy, policyqosqueueindex, plixeraggregatedrecordcount, plixer_qos_queue_drops.

Queue Drops By Index

A grouping of Policy QoS Queue Index trending Flows, Q Drops. Information Elements: policyqosqueueindex, plixeraggregatedrecordcount, plixer_qos_queue_drops.

Replicator

Report

Description

CPU

A grouping of Replicator trending Min, Avg, Max. Information Elements: sourceipaddress, plixercpuutilizationpercent.

Profile Statistics

A grouping of Profile trending Pkts In, Pkts Out, Bytes In, Bytes Out. Information Elements: observationdomainname, octetdeltacount, packetdeltacount, postoctetdeltacount, postpacketdeltacount.

Riverbed

Report

Description

Conversations RTT

A grouping of in Int, Source, Application, Destination, out Int trending RTT. Information Elements: ingressinterface, sourceipaddress, applicationid, destinationipaddress, egressinterface, tcpconnectionrtt_rvbd.

FE Type RTT

A grouping of FE Type trending Retrans Bytes, Retrans Pkts, RTT, Packets, Bytes. Information Elements: fetype_rvbd, octetdeltacount, packetdeltacount, tcpconnectionrtt_rvbd, tcppacketretransmissioncount_rvbd, tcpretransmissionbytecount_rvbd.

FE Type RTT and Source

A grouping of Source, FE Type trending Retrans Pkts, RTT, Packets, Bytes. Information Elements: sourceipaddress, fetype_rvbd, octetdeltacount, packetdeltacount, tcpconnectionrtt_rvbd, tcppacketretransmissioncount_rvbd.

FE Type RTT and Visibility

A grouping of FE Type, Visibility trending Retrans Pkts, RTT, Packets, Bytes. Information Elements: fetype_rvbd, visibility_rvbd, octetdeltacount, packetdeltacount, tcpconnectionrtt_rvbd, tcppacketretransmissioncount_rvbd.

Inner Connection IPs and RTT

A grouping of Source, Destination, IC CFE IP, IC SFE IP trending RTT. Information Elements: sourceipaddress, destinationipaddress, innerconnectioncfeipv4address_rvbd, innerconnectionsfeipv4address_rvbd, tcpconnectionrtt_rvbd.

Non Optimized Traffic

A grouping of Source, Destination, Common Port, Destination trending Packets, Bytes. Information Elements: sourceipaddress, destinationipaddress, commonport, passthroughreason_rvbd, octetdeltacount, packetdeltacount.

Pair RTT and Retrans

A grouping of Source, Destination trending Retrans Pkts, Retrans Bytes, RTT, Packets, Bytes. Information Elements: sourceipaddress, destinationipaddress, octetdeltacount, packetdeltacount, tcpconnectionrtt_rvbd, tcppacketretransmissioncount_rvbd, tcpretransmissionbytecount_rvbd.

Pair RTT with Ports

A grouping of Source, Src Port, Dst Port, Destination trending Retrans Pkts, RTT, Packets, Bytes. Information Elements: sourceipaddress, sourcetransportport, destinationtransportport, destinationipaddress, octetdeltacount, packetdeltacount, tcpconnectionrtt_rvbd, tcppacketretransmissioncount_rvbd.

Retransmissions

A grouping of in Int, Source, Destination, out Int trending Pckt Retrans, Bytes Retrans. Information Elements: ingressinterface, sourceipaddress, destinationipaddress, egressinterface, tcppacketretransmissioncount_rvbd, tcpretransmissionbytecount_rvbd.

Source RTT

A grouping of Source trending Retrans Pkts, Retrans Bytes, RTT, Packets, Bytes. Information Elements: sourceipaddress, octetdeltacount, packetdeltacount, tcpconnectionrtt_rvbd, tcppacketretransmissioncount_rvbd, tcpretransmissionbytecount_rvbd.

Wan Optimization

A grouping of in Int, Source, Src SFE IP, SFE Port, CFE Port, Dst CFE IP, Destination, out Int, Common Port trending Packets, Bytes. Information Elements: ingressinterface, sourceipaddress, innerconnectionsfeipv4address_rvbd, innerconnectionsfeport_rvbd, innerconnectioncfeport_rvbd, innerconnectioncfeipv4address_rvbd, destinationipaddress, egressinterface, commonport, octetdeltacount, packetdeltacount.

WRK RTT

A grouping of in Int, Application, out Int trending RTT. Information Elements: ingressinterface, applicationid, egressinterface, tcpconnectionrtt_rvbd.

Saisei

Report

Description

Dropped Pkts per Int

A grouping of Ingress Int, Distress, Egress Class trending Dropped Octets, Octets, Dropped Packets, Packets. Information Elements: ingressinterface, distress, egressflowclass, droppedoctettotalcount, droppedpackettotalcount, octetdeltacount, packetdeltacount.

Dropped Pkts per User

A grouping of User, Distress, Egress Class trending Dropped Octets, Octets, Dropped Packets, Packets. Information Elements: username, distress, egressflowclass, droppedoctettotalcount, droppedpackettotalcount, octetdeltacount, packetdeltacount.

Forensic Audit

A grouping of User, Application, Egress Class, Flow Start, Flow End trending RTT. Information Elements: username, applicationname, egressflowclass, flowstartmilliseconds, flowendmilliseconds, rttestimate.

Pair with Dropped Pkts

A grouping of Source IP, Destination IP, Distress, Egress Class trending Dropped Octets, Octets, Dropped Packets, Packets. Information Elements: sourceipaddress, destinationipaddress, distress, egressflowclass, droppedoctettotalcount, droppedpackettotalcount, octetdeltacount, packetdeltacount.

Pair with Retrans & RTT

A grouping of Source IP, Destination IP, Distress, Egress Class trending Retransmits, Retransmit Events, RTT. Information Elements: sourceipaddress, destinationipaddress, distress, egressflowclass, retransmissiondeltacount, retransmissioneventdeltacount, rttestimate.

Retransmits & RTT per Int

A grouping of Ingress Int, Distress, Egress Class trending Retransmits, Retransmit Events, RTT. Information Elements: ingressinterface, distress, egressflowclass, retransmissiondeltacount, retransmissioneventdeltacount, rttestimate.

SonicWALL Reports

Report

Description

App Conv

A grouping of Source, SonicWALL Application, Destination trending Packets, Bytes. Information Elements: sourceipaddress, swapp, destinationipaddress, octetdeltacount, packetdeltacount.

Applications

A grouping of SonicWALL Application trending Packets, Bytes. Information Elements: swapp, octetdeltacount, packetdeltacount.

Available Memory

A grouping of Exporter trending Available Memory. Information Elements: plixerexporter, mem_avail_ram.

CPU Avg. Utilization

A grouping of Core ID trending AVG Util. Information Elements: core_stat_core_id, core_stat_core_util.

CPU Max. Utilization

A grouping of Core ID trending MAX Util. Information Elements: core_stat_core_id, core_stat_core_util.

Intrusions

A grouping of SonicWALL Intrusion trending Packets, Bytes. Information Elements: flow_to_ips_id, octetdeltacount, packetdeltacount.

Spyware

A grouping of SonicWALL Spyware trending Packets, Bytes. Information Elements: flow_to_spyware_id, octetdeltacount, packetdeltacount.

Urls

A grouping of SonicWALL URL trending Packets, Bytes. Information Elements: swurl, octetdeltacount, packetdeltacount.

User Details

A grouping of SonicWALL User, swuserip, swuserauthtype, swuserdomain trending Packets, Bytes. Information Elements: swuser, swuserip, swuserauthtype, swuserdomain, octetdeltacount, packetdeltacount.

Users

A grouping of SonicWALL User trending Packets, Bytes. Information Elements: swuser, octetdeltacount, packetdeltacount.

Virus

A grouping of SonicWALL Virus trending Packets, Bytes. Information Elements: flow_to_virus_id, octetdeltacount, packetdeltacount.

VoIP Conversations

A grouping of swinitcallid, swrespcallid trending Jitter, Pkt Loss, Packets, Bytes. Information Elements: swinitcallid, swrespcallid, octetdeltacount, packetdeltacount, swvoipavglatency, swvoiplostpkts.

VoIP Initiators

A grouping of swinitcallid trending Jitter, Pkt Loss, Packets, Bytes. Information Elements: swinitcallid, octetdeltacount, packetdeltacount, swvoipavglatency, swvoiplostpkts.

VoIP Responders

A grouping of swrespcallid trending Jitter, Pkt Loss, Packets, Bytes. Information Elements: swrespcallid, octetdeltacount, packetdeltacount, swvoipavglatency, swvoiplostpkts.

VPN Local Address

A grouping of VPN Local IP trending Packets, Bytes. Information Elements: swvpnlocalip, octetdeltacount, packetdeltacount.

VPN Name

A grouping of VPN Tunnel Name trending Packets, Bytes. Information Elements: swvpntunnelname, octetdeltacount, packetdeltacount.

VPN Name Local & Remote Address

A grouping of VPN Tunnel Name, VPN Local IP, VPN Remote IP trending Packets, Bytes. Information Elements: swvpntunnelname, swvpnlocalip, swvpnremoteip, octetdeltacount, packetdeltacount.

VPN Remote Address

A grouping of VPN Remote IP trending Packets, Bytes. Information Elements: swvpnremoteip, octetdeltacount, packetdeltacount.

Source Reports

Report

Description

Autonomous System by IP

A grouping of Source AS trending Packets, Bytes. Information Elements: srcipas, octetdeltacount, packetdeltacount.

Autonomous System by Tag

A grouping of Src AS trending Packets, Bytes. Information Elements: bgpsourceasnumber, octetdeltacount, packetdeltacount.

Autonomous System by Tag (Peer)

A grouping of bgpprevadjacentasnumber trending Packets, Bytes. Information Elements: bgpprevadjacentasnumber, octetdeltacount, packetdeltacount.

Countries

A grouping of Source Country trending Packets, Bytes. Information Elements: srccountry, octetdeltacount, packetdeltacount.

Countries with AS

A grouping of Source Country, Source AS, Hosts (Dst) trending Flows, Packets, Bytes. Information Elements: srccountry, srcipas, destinationipaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Customer VLAN

A grouping of dot1qcustomervlanid trending Flows, Packets, Bytes. Information Elements: dot1qcustomervlanid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

dot1q VLAN

A grouping of dot1qvlanid trending Flows, Packets, Bytes. Information Elements: dot1qvlanid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Host Flows

A grouping of Source trending Hosts (Destination), Packets, Flows. Information Elements: sourceipaddress, destinationipaddress, packetdeltacount, plixeraggregatedrecordcount.

Host Pkt Length

A grouping of Source trending Length MIN, Length MAX, Length AVG . Information Elements: sourceipaddress, iptotallength.

Hosts

A grouping of Source trending Packets, Bytes. Information Elements: sourceipaddress, octetdeltacount, packetdeltacount.

ICMP

A grouping of Source, Code, Type trending Count. Information Elements: sourceipaddress, icmpcodeipv4, icmptypeipv4, plixeraggregatedrecordcount.

L2 Octets

A grouping of Source trending Packets, L2 Octets. Information Elements: sourceipaddress, layer2octetdeltacount, packetdeltacount.

MAC

A grouping of Source MAC trending Flows, Packets, Bytes. Information Elements: sourcemacaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

MAC L2

A grouping of Source MAC trending Packets, L2 Octets. Information Elements: sourcemacaddress, layer2octetdeltacount, packetdeltacount.

MAC Sum of Sq

A grouping of Source MAC trending Packets, Sum of Sq. Octets. Information Elements: sourcemacaddress, octetdeltasumofsquares, packetdeltacount.

Post MAC

A grouping of Post Src Mac trending Count, Packets, Bytes. Information Elements: postsourcemacaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Rev 2nd lvl Domains

A grouping of Src Rev 2nd lvl Domain trending Packets, Bytes. Information Elements: srcdomain, octetdeltacount, packetdeltacount.

Source IP Groups

A grouping of Source IP Group trending Packets, Bytes. Information Elements: srcipgroup, octetdeltacount, packetdeltacount.

Source w/Flags

A grouping of Source IP Address, tcpcontrolbits trending Packets, Bytes, Flows. Information Elements: sourceipaddress, tcpcontrolbits, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Src IP - Dst AS

A grouping of Exporter, Source IP Address, Dst AS trending Packets, Bytes. Information Elements: plixerexporter, sourceipaddress, bgpdestinationasnumber, octetdeltacount, packetdeltacount.

Subnets

A grouping of Src Subnet trending Packets, Bytes. Information Elements: srcnetwork, octetdeltacount, packetdeltacount.

Sum Of Sq. Octets

A grouping of Source trending Packets, Sum of Sq. Octets. Information Elements: sourceipaddress, octetdeltasumofsquares, packetdeltacount.

User Name by IP

A grouping of Source, User Name(s) trending Packets, Bytes. Information Elements: sourceipaddress, srcipname, octetdeltacount, packetdeltacount.

Vendor By MAC

A grouping of Source Vendor trending Devices, Flows, Packets, Bytes. Information Elements: src_vendor_by_mac, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount, sourcemacaddress.

VLAN

A grouping of vlanid trending Flows, Packets, Bytes. Information Elements: vlanid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

VLAN Interfaces

A grouping of Interface, VLAN trending Packets, Bytes. Information Elements: ingressinterface, dot1qcustomervlanid, octetdeltacount, packetdeltacount.

Stormshield

Report

Description

Top Url Categories

A grouping of Url Category trending Packets, Bytes. Information Elements: netasqurlcategory, octetdeltacount, packetdeltacount.

Top Urls

A grouping of Url trending Packets, Bytes. Information Elements: netasqurl, octetdeltacount, packetdeltacount.

Top Users

A grouping of User trending Packets, Bytes. Information Elements: username, octetdeltacount, packetdeltacount.

Top Reports

Report

Description

Applications Defined

A grouping of Application trending Packets, Bytes. Information Elements: applicationid, octetdeltacount, packetdeltacount.

Availability By IP

A grouping of Destination IP Address trending Availability. Information Elements: destinationipaddress, state.

Clients

A grouping of Client trending Packets, Bytes. Information Elements: clientipv4address, octetdeltacount, packetdeltacount.

DSCP

A grouping of DSCP trending Packets, Bytes. Information Elements: ipdiffservcodepoint, octetdeltacount, packetdeltacount.

Exporters

A grouping of Exporter trending Bytes. Information Elements: plixerexporter, octetdeltacount.

ICMP Type IPv4

A grouping of ICMP Type Code trending Count, Packets, NULL. Information Elements: icmptypecodeipv4, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

ICMP Type IPv6

A grouping of ICMP Type Code trending Count, Packets, NULL. Information Elements: icmptypecodeipv6, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

IGMP Type

A grouping of IGMP Type trending Count, Packets, NULL. Information Elements: igmptype, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Interface Compression

A grouping of Exporter, Outbound Interface trending % Pkt Comp, % Octet Comp. Information Elements: plixerexporter, egressinterface, percentoctetcompression, percentpacketcompression.

Interface-IP-MAC

A grouping of in Int, Source, Source MAC trending Flows, Packets, Bytes. Information Elements: ingressinterface, sourceipaddress, sourcemacaddress, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Interfaces

A grouping of Exporter, Inbound Interface, Interface Speed trending Bytes, % Util. Information Elements: plixerexporter, ingressinterface, inifspeed, interfacepercent, octetdeltacount.

Multicast Destinations

A grouping of Destination trending Pkts, Bytes. Information Elements: destinationipaddress, octetdeltacount, packetdeltacount.

Multicast Pairs

A grouping of Source, Destination trending Pkts, Bytes. Information Elements: sourceipaddress, destinationipaddress, octetdeltacount, packetdeltacount.

Next Hop

A grouping of Next Hop trending Packets, Bytes. Information Elements: ipnexthopipv4address, octetdeltacount, packetdeltacount.

Obsrv Pt. Layer 2

A grouping of Obsrv Pt trending Count, Packets, L2 Octets. Information Elements: observationpointid, layer2octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Obsrv Pt. Octet Sum of Squares

A grouping of Obsrv Pt trending Packets, Sum of Sq. Octets. Information Elements: observationpointid, octetdeltasumofsquares, packetdeltacount.

Protocols

A grouping of Protocol trending Packets, Bytes. Information Elements: protocolidentifier, octetdeltacount, packetdeltacount.

Round Trip Time By IP

A grouping of Destination IP Address trending RTT. Information Elements: destinationipaddress, latency_ms.

Servers

A grouping of Server trending Packets, Bytes. Information Elements: serveripv4address, octetdeltacount, packetdeltacount.

Type of Service

A grouping of Type Of Service trending Packets, Bytes. Information Elements: ipclassofservice, octetdeltacount, packetdeltacount.

Users

A grouping of User trending Flows, Bytes. Information Elements: username, octetdeltacount, plixeraggregatedrecordcount.

VLAN with Priority, CoS & DSCP

A grouping of VLAN, Priority, CoS, DSCP trending Packets, Sum of Sq. Octets. Information Elements: dot1qvlanid, dot1qpriority, ipclassofservice, ipdiffservcodepoint, octetdeltasumofsquares, packetdeltacount.

Well Known Ports

A grouping of Well Known trending Packets, Bytes. Information Elements: commonport, octetdeltacount, packetdeltacount.

UEBA Reports

Report

Description

Azure User Logins

A grouping of User, Source, Success, Location trending Count. Information Elements: username, sourceipaddress, ipfixifyloginstatename, ipfixifylogsource, plixeraggregatedrecordcount.

LDAP User Logins

A grouping of User, Source, Admin trending Count. Information Elements: username, sourceipaddress, ipfixifylogintypename, plixeraggregatedrecordcount.

Office 365 User Logins

A grouping of User, Source, Application, Success, Location trending Count. Information Elements: username, sourceipaddress, applicationname, ipfixifyloginstatename, ipfixifylogsource, plixeraggregatedrecordcount.

VeloCloud Reports

Report

Description

Application Flow Path

A grouping of Application, destinationuuid, vcflowpath trending Flows. Information Elements: applicationtag, destinationuuid, vcflowpath, plixeraggregatedrecordcount.

Application Link Policy

A grouping of Application, destinationuuid, vclinkpolicy trending Flows. Information Elements: applicationtag, destinationuuid, vclinkpolicy, plixeraggregatedrecordcount.

Application Policies

A grouping of Application, vclinkpolicy, vcroutetype, Traffic Type trending Packets, Bytes. Information Elements: applicationtag, vclinkpolicy, vcroutetype, vctraffictype, octetdeltacount, packetdeltacount.

Application Priority

A grouping of Application, destinationuuid, vcpriority trending Flows. Information Elements: applicationtag, destinationuuid, vcpriority, plixeraggregatedrecordcount.

Application Route Type

A grouping of Application, destinationuuid, vcroutetype trending Flows. Information Elements: applicationtag, destinationuuid, vcroutetype, plixeraggregatedrecordcount.

Application Traffic Type

A grouping of Application, destinationuuid, Traffic Type trending Flows. Information Elements: applicationtag, destinationuuid, vctraffictype, plixeraggregatedrecordcount.

Conv Dst Edge

A grouping of Source, Application, Destination, destinationuuid trending Flows, Bytes. Information Elements: sourceipaddress, applicationtag, destinationipaddress, destinationuuid, octetdeltacount, plixeraggregatedrecordcount.

Dst Edge

A grouping of destinationuuid trending Flows, Bytes. Information Elements: destinationuuid, octetdeltacount, plixeraggregatedrecordcount.

Flow Path

A grouping of vcflowpath trending Flows, Bytes. Information Elements: vcflowpath, octetdeltacount, plixeraggregatedrecordcount.

Interface Jitter

A grouping of ingressinterface trending countdistinct_destinationipaddress, avg_avgjittertxms. Information Elements: ingressinterface, avgjittertxms, destinationipaddress.

Interface Latency

A grouping of ingressinterface trending Unique Dsts, Avg Latency. Information Elements: ingressinterface, avglatencytxms, destinationipaddress.

Interface Metrics

A grouping of ingressinterface trending Avg Latency, avg_avgjittertxms, avg_avglosstxpct. Information Elements: ingressinterface, avgjittertxms, avglatencytxms, avglosstxpct.

Interface Packet Loss

A grouping of ingressinterface trending countdistinct_destinationipaddress, avg_avglosstxpct. Information Elements: ingressinterface, avglosstxpct, destinationipaddress.

Link Utilization

A grouping of linkuuid trending Packets, Bytes. Information Elements: linkuuid, octetdeltacount, packetdeltacount.

Packet Loss Conv

A grouping of Source, Application, Destination, destinationuuid trending Retransmission, Lost Packets. Information Elements: sourceipaddress, applicationtag, destinationipaddress, destinationuuid, lostpacketsrxdeltacount, retransmittedpacketstxdeltacount.

Packet Loss Edge

A grouping of destinationuuid trending Retransmission, Lost Packets. Information Elements: destinationuuid, lostpacketsrxdeltacount, retransmittedpacketstxdeltacount.

Remediation Events

A grouping of Application trending Replication Rx, Replication TX, Lost Packets, Retransmission. Information Elements: applicationtag, lostpacketsrxdeltacount, replicatedpacketsrxdeltacount, replicatedpacketstxdeltacount, retransmittedpacketstxdeltacount.

Traffic Type

A grouping of Traffic Type trending Flows, Bytes. Information Elements: vctraffictype, octetdeltacount, plixeraggregatedrecordcount.

Viptela Reports

Report

Description

Health

A grouping of Device Name, Device Model, System IP trending Memory Used, CPU System(%), Disk Used. Information Elements: vtla_host_name, vtla_device_model, vtla_system_ip, vtla_cpu_system, vtla_disk_used, vtla_mem_used.

Local Color Performance

A grouping of vEdge Host, Local Color trending Avg. Latency, Avg. Loss, Avg. Jitter. Information Elements: vtla_vdevice_host_name, vtla_local_color, vtla_mean_jitter, vtla_mean_latency, vtla_mean_loss.

Policies Added

A grouping of vEdge, Policies Added trending Record Count. Information Elements: vtla_host_name, vtla_policies_added, plixeraggregatedrecordcount.

Policies Removed

A grouping of vEdge, Policies Removed trending Record Count. Information Elements: vtla_host_name, vtla_policies_removed, plixeraggregatedrecordcount.

Remote Color Performance

A grouping of vEdge Host, Remote Color trending Avg. Latency, Avg. Loss, Avg. Jitter. Information Elements: vtla_vdevice_host_name, vtla_remote_color, vtla_mean_jitter, vtla_mean_latency, vtla_mean_loss.

SLA Events

A grouping of Event ID, vEdge, Policies Added, Policies Removed trending Event Count. Information Elements: vtla_id, vtla_host_name, vtla_policies_added, vtla_policies_removed, plixeraggregatedrecordcount.

Tunnel Applications

A grouping of vEdge Host, Local Color, Remote System, Remote Color, Application trending Packets, Bytes. Information Elements: vtla_host_name, vtla_local_color, vtla_remote_system_ip, vtla_remote_color, vtla_application, octetdeltacount, packetdeltacount.

Tunnel Performance

A grouping of vEdge Host, Local Color, Remote System, Remote Color trending Avg. Latency, Avg. Loss, Avg. Jitter. Information Elements: vtla_vdevice_host_name, vtla_local_color, vtla_remote_system_ip, vtla_remote_color, vtla_mean_jitter, vtla_mean_latency, vtla_mean_loss.

vEdge Host Performance

A grouping of vEdge Host trending Avg. Latency, Avg. Loss, Avg. Jitter. Information Elements: vtla_vdevice_host_name, vtla_mean_jitter, vtla_mean_latency, vtla_mean_loss.

Vitals

Report

Description

CPU

A grouping of Server trending CPU. Information Elements: plixercomponentipaddress, plixercpuutilizationpercent.

CPU per Process

A grouping of Process trending min, avg, max. Information Elements: processcommandline, processpercentcpu.

Data Ages

A grouping of Source IP Address, timingtest trending Sent. Information Elements: sourceipaddress, timingtest, dataageseconds.

Database

A grouping of Server trending txid, Connections By Bytes, Queries, Timed Checkpoints, Requested Checkpoints, Shared Buffers, Buffers Written. Information Elements: plixercomponentipaddress, buffers_allocd, buffers_written, checkpoints_requested, checkpoints_timed, plixerdbconnections, plixerdbquestions, postgresql_txid.

Database

A grouping of Server trending Connections By Bytes, Read Req, Write Req, Cache Free, Queries, Threads, Buffers Used. Information Elements: plixercomponentipaddress, plixerdbconnections, plixerdbkeybufferused, plixerdbkeyreadreq, plixerdbkeywritereq, plixerdbqcachefreemem, plixerdbquestions, plixerdbthreadsconnected.

Dir Sizes

A grouping of Collector, Directory trending Bytes. Information Elements: plixercomponentipaddress, plixerstoragedrive, plixerstorageusedbytes.

Disk Requests

A grouping of Collector, Drive trending Backlog, Request Wait, Read Merges/Sec, Read Requests/Sec, Request Sectors/Sec, Write Octets/Sec, Write Requests/Sec. Information Elements: plixercomponentipaddress, hddlabel, plixerdiskaveragerequestbacklog, plixerdiskaveragerequestwait, plixerdiskreadrequestmergesps, plixerdiskreadrequestsps, plixerdiskrequestsectorsps, plixerdiskwriterequestmergesps, plixerdiskwriterequestsps.

Disk Utilization

A grouping of Collector, Drive trending % Utilization, Read Wait, Write Wait, Read Octets/Sec, Write Octets/Sec. Information Elements: plixercomponentipaddress, hddlabel, plixerdiskaveragepercentutilization, plixerdiskaveragereadwait, plixerdiskaveragewritewait, plixerdiskreadoctetsps, plixerdiskwriteoctetsps.

Distributed Heartbeat

A grouping of Exporter, Plixer Server, Type, Status trending Time. Information Elements: plixercomponentipaddress, ipv4polled, plixerheartbeattype, plixerheartbeatstatus, plixereventdurationmilliseconds.

Distributed Synchronization

A grouping of Source, Destination, Caller, DB Table trending Avg Time, Records. Information Elements: syncsourceipv4addr, syncdestinationipv4addr, plixersubroutine, plixertablename, plixereventdurationmilliseconds, plixerrowcount.

Event Queue Statistics

A grouping of Collector, DB Table trending Data Age, Total Rows, Disk Used. Information Elements: plixercomponentipaddress, plixertablename, plixerdataageseconds, plixerrowcount, plixerstorageusedbytes.

FA Counts

A grouping of Collector, algorithm trending Min, Avg, Max. Information Elements: plixercomponentipaddress, faalgorithmid, faviolationcount.

FA Times

A grouping of Collector, algorithm trending Min Dur., Avg Dur., Max Dur.. Information Elements: plixercomponentipaddress, faalgorithmid, plixereventdurationmilliseconds.

Flow Metrics/Collector

A grouping of Collector trending MFSN, Packets, Flows. Information Elements: plixercomponentipaddress, plixerflowcount, plixerflowpacketcount, plixermfsncount.

Flow Metrics/Exporter

A grouping of Collector, Exporter trending MFSN, Packets, Flows. Information Elements: plixercomponentipaddress, plixerexporterid, plixerflowcount, plixerflowpacketcount, plixermfsncount.

Flow Metrics/Port

A grouping of Collector, Port trending MFSN, Packets, Flows. Information Elements: plixercomponentipaddress, plixerlisteningport, plixerflowcount, plixerflowpacketcount, plixermfsncount.

Frozen XIDs Age

A grouping of plixercomponentipaddress trending max_postgresql_datfrozenxid_age. Information Elements: plixercomponentipaddress, postgresql_datfrozenxid_age.

Frozen XIDs Age by DB

A grouping of plixercomponentipaddress, postgresql_datname trending max_postgresql_datfrozenxid_age. Information Elements: plixercomponentipaddress, postgresql_datname, postgresql_datfrozenxid_age.

Memory

A grouping of Server trending Available. Information Elements: plixercomponentipaddress, plixermemavailablebytes.

Memory per process

A grouping of Process trending Shared, Resident, Virtual. Information Elements: processcommandline, processresidentmemorysize, processsharedmemorysize, processvirtualmemorysize.

ML Engine Heartbeat

A grouping of Exporter, Plixer Server, Type, Status trending Response Time, Data Age. Information Elements: plixercomponentipaddress, plixerexporteripv6address, plixerheartbeattype, plixerheartbeatstatus, dataageseconds, plixereventdurationmilliseconds.

ML Engine Index Document Count

A grouping of ML Engine, Elasticsearch Index trending Avg Count. Information Elements: plixercomponentipaddress, plixermlelasticsearchindexname, plixermlelasticsearchindexcount.

ML Engine Kafka Lag

A grouping of ML Engine, Kafka Topic trending Avg Lag. Information Elements: plixercomponentipaddress, plixermlkafkatopicname, plixermlkafkalag.

ML Engine Model Count

A grouping of ML Engine trending Avg Model Count. Information Elements: plixercomponentipaddress, plixermlmodelfilecount.

PG Lock Count

A grouping of Collector trending Locks. Information Elements: exporteripv4address, postgresql_locks.

Report Request Time

A grouping of Collector, reportrequestid, Report Type trending duration. Information Elements: plixercomponentipaddress, reportrequestid, reporttype, plixereventdurationmilliseconds.

Report Type Data Time

A grouping of Report Type trending Count, Min Dur., Avg Dur., Max Dur.. Information Elements: reporttype, plixeraggregatedrecordcount, plixereventdurationmilliseconds.

Report Type Query Time

A grouping of Report Type trending Count, Min Dur., Avg Dur., Max Dur.. Information Elements: reporttype, plixeraggregatedrecordcount, plixereventdurationmilliseconds.

Rollup Counts

A grouping of Exporter, Message Info trending Max Rows. Information Elements: plixerexporterid, message_info, plixerrowcount.

Rollup Data Ages

A grouping of Exporter, Template trending Min, Avg, Max. Information Elements: plixerexporterid, plixertemplateid, plixerdataageseconds.

Spool Counts

A grouping of Collector, Directory trending Spool Mins. Information Elements: exporteripv4address, plixerstoragedrive, plixerspoolcount.

Storage

A grouping of Server, Drive/Mount trending Avail Bytes. Information Elements: plixercomponentipaddress, plixerstoragedrive, plixerstorageavailablebytes.

Stream Age

A grouping of Collector, Stream trending Min Age, Avg Age, Max Age. Information Elements: plixercomponentipaddress, plixertablename, plixerdataageseconds.

Stream Statistics

A grouping of Collector, Stream trending Data Age, Total Rows, Disk Used. Information Elements: plixercomponentipaddress, plixertablename, plixerdataageseconds, plixerrowcount, plixerstorageusedbytes.

Syslogs

A grouping of Agent trending Processed, Received. Information Elements: exporteripv4address, plixersyslogsprocessed, plixersyslogsreceived.

Task Runtime

A grouping of Collector, Task trending Count, Min Dur., Avg Dur., Max Dur.. Information Elements: plixercomponentipaddress, plixertaskname, plixeraggregatedrecordcount, plixereventdurationmilliseconds.

Totals / Rollups Times

A grouping of Exporter, Template, Event, Interval trending Min Rows, Avg Rows, Max Rows, Min Dur., Avg Dur., Max Dur.. Information Elements: plixerexporterid, plixertemplateid, plixereventid, plixerdstintervallength, plixereventdurationmilliseconds, plixerrowcount.

VMware DFW

Report

Description

Destination IP, vNIC, FW Event

A grouping of Destination, UUID, vNIC, FW Event, Rule ID trending Flow Count, Packets, Bytes. Information Elements: destinationipaddress, vmuuid, vnicindex, firewallevent, ruleid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

Source IP, vNIC, FW Event

A grouping of Source, UUID, vNIC, FW Event, Rule ID trending Flow Count, Packets, Bytes. Information Elements: sourceipaddress, vmuuid, vnicindex, firewallevent, ruleid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

UUID, vNIC, FW Event

A grouping of UUID, vNIC, FW Event, Rule ID trending Flow Count, Packets, Bytes. Information Elements: vmuuid, vnicindex, firewallevent, ruleid, octetdeltacount, packetdeltacount, plixeraggregatedrecordcount.

VMware VDS

Report

Description

Pairs with Tenants

A grouping of Source, Src Tenant, Dst Tenant, Destination, vxLan ID trending Packets, Bytes. Information Elements: sourceipaddress, tenantsourceipv4, tenantdestipv4, destinationipaddress, overlay_net_id, octetdeltacount, packetdeltacount.

Tenant Conversations

A grouping of Src Tenant, Src Tenant Port, Tenant Protocol, Dst Tenant Port, Dst Tenant, vxLan ID trending Packets, Bytes. Information Elements: tenantsourceipv4, tenantsourceport, tenantprotocol, tenantdestport, tenantdestipv4, overlay_net_id, octetdeltacount, packetdeltacount.

Top Destination

A grouping of Destination, Dst Tenant, Egress Attribute, vxLan ID trending Packets, Bytes. Information Elements: destinationipaddress, tenantdestipv4, egressinterfaceattr, overlay_net_id, octetdeltacount, packetdeltacount.

Top Interfaces

A grouping of Ingress Interface, vxLan ID trending Packets, Bytes. Information Elements: ingressinterfaceattr, overlay_net_id, octetdeltacount, packetdeltacount.

Top Source

A grouping of Source, Src Tenant, Ingress Attribute, vxLan ID trending Packets, Bytes. Information Elements: sourceipaddress, tenantsourceipv4, ingressinterfaceattr, overlay_net_id, octetdeltacount, packetdeltacount.

Volume Reports

Report

Description

Availability

A grouping of Time Stamp, Total trending . Information Elements: goodtime, total, .

Flow Volume

Flow rate. As a volume report, the table represents values per time bucket

Host Count (dst)

The number of distinct destination hosts. As a volume report, the table represents values per time bucket

Host Count (src)

The number of distinct source hosts. As a volume report, the table represents values per time bucket

Pair Volume

The number of distinct source/destination pairs. As a volume report, the table represents values per time bucket

Round Trip Time

A grouping of Time Stamp, Total trending . Information Elements: goodtime, total, .

Traffic Volume

Utilization in bits or bytes along with peak values and 95th percentile. As a volume report, the table represents values per time bucket

Wireless Reports

Report

Description

Applications by Wireless Host

A grouping of Host(s), Application trending Packets, octets. Information Elements: staipv4address, applicationtag, octetdeltacount, packetdeltacount.

Applications by Wireless Host with DSCP

A grouping of Host(s), Application, DSCP, Post DSCP trending Packets, octets. Information Elements: staipv4address, applicationtag, ipdiffservcodepoint, postipdiffservcodepoint, octetdeltacount, packetdeltacount.

Applications Downstream

A grouping of Application trending Avg. Pkt. Size, Packets, octets. Information Elements: applicationtag, avgpacketsize, octetdeltacount, packetdeltacount.

Applications Upstream

A grouping of Application trending Avg. Pkt. Size, Packets, octets. Information Elements: applicationtag, avgpacketsize, octetdeltacount, packetdeltacount.

Clients per AP

A grouping of AP trending Clients. Information Elements: wtpmacaddress, stamacaddress.

Clients per SSID

A grouping of WLAN SSID trending Clients. Information Elements: wlanssid, stamacaddress.

Hosts by SSID

A grouping of Host(s), WLAN SSID trending Packets, octets. Information Elements: staipv4address, wlanssid, octetdeltacount, packetdeltacount.

Hosts with MAC

A grouping of Host(s), STA Mac Addr, AP Mac Addr trending Packets, octets. Information Elements: staipv4address, stamacaddress, wtpmacaddress, octetdeltacount, packetdeltacount.

Hosts with User Name

A grouping of Source, User Name(s) trending Packets, Bytes. Information Elements: staipv4address, staipname, octetdeltacount, packetdeltacount.

Host to Host with AP Mac

A grouping of Source, Destination, AP Mac Addr trending Packets, octets. Information Elements: sourceipaddress, destinationipaddress, wtpmacaddress, octetdeltacount, packetdeltacount.

Host to Host with SSID

A grouping of Source, Destination, WLAN SSID trending Packets, octets. Information Elements: sourceipaddress, destinationipaddress, wlanssid, octetdeltacount, packetdeltacount.

SSID List

A grouping of WLAN SSID trending Packets, octets. Information Elements: wlanssid, octetdeltacount, packetdeltacount.

Usage by SSID and AP

A grouping of AP MAC, WLAN SSID trending Packets, octets, Clients. Information Elements: wtpmacaddress, wlanssid, octetdeltacount, packetdeltacount, staipv4address.

Usage by SSID and AP (Src IP)

A grouping of AP MAC, WLAN SSID trending Packets, octets, Clients. Information Elements: wtpmacaddress, wlanssid, octetdeltacount, packetdeltacount, sourceipaddress.

User and Controller Details

A grouping of AP MAC, Source, User Name(s), WLAN SSID trending Packets, octets. Information Elements: wtpmacaddress, staipv4address, staipname, wlanssid, octetdeltacount, packetdeltacount.

Ziften

Report

Description

App Details

A grouping of Application, Version, App Description, Internal Name, File Name, CMD, MD5 trending Flows, Bytes. Information Elements: zflowverproductname, zflowverproductversion, zflowverfiledescription, zflowverinternalname, zflowveroriginalfilename, zflowcommandline, zflowmd5, octetdeltacount, plixeraggregatedrecordcount.

Base File and User

A grouping of User Name, Base File, OS trending Flows, Bytes. Information Elements: username, zflowparentimagebasefilename, zflowosname, octetdeltacount, plixeraggregatedrecordcount.

Command Line by Src

A grouping of Source, Command Line, PID trending Flows, Bytes. Information Elements: sourceipaddress, zflowcommandline, zflowpid, octetdeltacount, plixeraggregatedrecordcount.

Machine Details

A grouping of Machine, User Name, MD5, OS Name, OS Version, Agent UUID trending Flows, Bytes. Information Elements: zflowmachinename, username, zflowmd5, zflowosname, zflowosversion, zflowagentguid, octetdeltacount, plixeraggregatedrecordcount.

Machines

A grouping of Machine trending Flows, Bytes. Information Elements: zflowmachinename, octetdeltacount, plixeraggregatedrecordcount.

MD5

A grouping of Parent MD5, Parent Product Name, MD5, zflowverproductname trending Flows. Information Elements: zflowparentmd5, zflowparentverproductname, zflowmd5, zflowverproductname, plixeraggregatedrecordcount.