View the User Activity Report

Table of Contents

Schedule and Share URL Filtering Reports

View the User Activity Report

Learn how to quickly generate and view user activity reports for users and groups in your organization.

Where can I use this?	What do I need?
Prisma Access (Managed by Strata Cloud Manager) Prisma Access (Managed by Panorama) NGFW (Managed by Strata Cloud Manager) NGFW (Managed by PAN-OS or Panorama)	Advanced URL Filtering license (or a legacy URL filtering license) Notes: Legacy URL filtering licenses are discontinued, but active legacy licenses are still supported. `Prisma Access` licenses include Advanced URL Filtering capabilities.

This report provides a quick method of viewing user or group activity and also provides an option to view browse time activity.

View the User Activity Report (Strata Cloud Manager)

Whether you're using Panorama or Strata Cloud Manager to manage Prisma Access, you can go to the Strata Cloud Manager app to generate a user activity report. In the app, go to Activity to find the User Activity Report dashboard. Access to user activity data requires an active Cloud Identity Engine tenant.

Activate the Cloud Identity Engine.
Set up the Cloud Identity Engine.
Configure a User Activity Report.
1. Select ActivityUser Activity.
2. Enter Username to generate a report for one person.
3. Select the report Type:
  Select User to generate a report for one person.
  Select Group for a group of users.
  
  You must enable User-ID in order to be able to select user or group names. If User-ID is not configured, you can select the type User and enter the IP address of the user’s computer.
4. Enter the Username/IP Address for a user report or enter the group name for a user group report.
5. Select the time period. You can select an existing time period, or select Custom.
6. Select the Include Detailed Browsing check box, so browsing information is included in the report.
Run the report.
1. Click Run Now.
2. When the firewall finishes generating report, click one of the links to download it:
  Click Download User Activity Report to download a PDF version of the report.
  Click Download URL Logs to download a CSV file of the corresponding log entries.
3. After downloading the report, click Cancel.
4. If you want to save the user activity report settings so you can run the same report again later, click OK; otherwise click Cancel.
View the user activity report by opening the file that you downloaded. The PDF version of the report shows the user or group on which you based the report, the report time frame, and a table of contents:
Click an item in the table of contents to view the report details. For example, click Traffic Summary by URL Category to view statistics for the selected user or group.

View the User Activity Report (PAN-OS & Panorama)

Configure a User Activity Report.
1. Select MonitorPDF ReportsUser Activity Report.
2. Add a report and enter a Name for it.
3. Select the report Type:
  Select User to generate a report for one person.
  Select Group for a group of users.
  
  You must enable User-ID to be able to select user or group names. If User-ID is not configured, you can select the type User and enter the IP address of the user’s computer.
4. Enter the Username/IP Address for a user report or enter the group name for a user group report.
5. Select the time period. You can select an existing time period, or select Custom.
6. Select the Include Detailed Browsing check box, so browsing information is included in the report.
Run the report.
1. Click Run Now.
2. When the firewall finishes generating report, click one of the links to download it:
  Click Download User Activity Report to download a PDF version of the report.
  Click Download URL Logs to download a CSV file of the corresponding log entries.
3. After downloading the report, click Cancel.
4. If you want to save the user activity report settings to run the same report again later, click OK; otherwise click Cancel.
View the user activity report by opening the file that you downloaded. The PDF version of the report shows the user or group on which you based the report, the report time frame, and a table of contents:
Click an item in the table of contents to view the report details. For example, click Traffic Summary by URL Category to view statistics for the selected user or group.