Hi,
I want to create a custom report. the report should show [lets say, in a table] the "URL" from log.
the field is parsed (default custom type), and available in dashboards searches etc.
for some reason, when I pick from the "Query Wizard" >> "Event Queries"
the URL field is missing... cant see it. anyone now why?
in addition, How can I create a table aggregating according to more that 1 column?
for example, showing "source IP" in column 1, and the "Source geo country" in column 2 etc.
Solved! Go to Solution.
This report for getting details about the top most visited URL’s can be generated in a firewall.
Since this is report customisation you can check with the McAfee professional services team if we can generate this report on the SIEM.
would love to have your assistance
I am able to see when I click on Add or Edit Report in ESM Properties>Reports page.
In the line number 6 (Optional Section), when I try to add a new filter by typing in 'UR' it gives options to select URL & URL Category.
Please check the attached screenshot.
Regards,
Prashanth B Pillai
McAfee Technical Support
Customer Success Group
Hi and thank you for your reply.
my issue is not a filter issue.
"URL" is not available under "Event Queries".
attached a screenshot showing the available fields starting with U
Yes in Query Wizard>Event Queries,URL is not listed.
You can create a URL_Category query, filter for the URL then export the view in text or PDF format.
Once you select the URL_Category in Event queries, you can also add a filter for the respective URL.
The respective view can be saved as a new name as well.
The above view result can be exported in PDF as well as text format.
Regards,
Prashanth B Pillai
McAfee Technical Support
Customer Success Group
Hi, thank you for your response.
my main goal is to present within a table the most visited URLs (as a "report" object) . Thus, filtering for a specific URL as suggested (in a view or in a report) is not quiet helpful since I need ALL last visited URLs.
*another issue - querying for "URL category" shows only 1 category - "Other".
can you please further assist?
This report for getting details about the top most visited URL’s can be generated in a firewall.
Since this is report customisation you can check with the McAfee professional services team if we can generate this report on the SIEM.
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA