Filter Logs by Group on Panorama

  1. Select PanoramaSetupManagement, edit the Panorama Settings, and Enable reporting and filtering on groups so that Panorama can locally store user and user group information that it receives from firewalls.
    Panorama_Settings_reporting-filtering.png
  2. Configure device groups so that Panorama can receive user group information from one Master Device (firewall) in each device group. You must enable Panorama to Store users and groups from Master Device.
    device_group_master_device.png
  3. Filter logs by user group.
    For example, to filter the Traffic logs, select MonitorLogsTraffic and Add Filter (  add_icon.png  ). When you configure the query, set the Attribute to Source User and set the Value to the name of the user group.
    filter_user-groups.png
    After you Apply Filter ( Submit_icon.png ), the page displays logs only for traffic that users in the specified groups initiated.

Related Documentation