Numbers not matching

[amsi]

This is kind of a new person question. We got our monthly summary today and we noticed some of the numbers were a bit high for blocked violations. So I went through each user log and complied a spread sheet for each of the high violations. I noticed that the numbers after I added them up were not even close to the summary numbers for that month.

Is there a reason why it would do that? To summarize it. Our numbers were high on "Top Categories of Blocked Violations". I compiled a separate spread sheet for each user and the top blocked violation categories. After I made it I added up the numbers and they do not match what the summary gave me from untangle. (however I do see "others listed" as a user and I didn't account for that because there is no way to account for it is there?

[amsi]

Also is there a way to see a category and who's hit that blocked category the most? Say Blocked Violations, which user hit it the most?

[dmorris]

If you just click on the excel icon next to the "Top xyz" graph it will give you the full list.

So, for example, if you click on "Top Host Violators" little excel icon it should generate the complete list for you.

Beware, if the reports covers more time that the data you have retained then the numbers won't match, but you will see a warning when viewing that report that the time exceeds your data retention time.

[amsi]

I think I explained it wrong. I understand how to get the excel sheet but I was asking if you could break it down per category. Such as the Top Host Violators" shows the category "criminal skills" Can I see who tried to hit that category.

[dmorris]

You can click on each violator and get a full report for each host or user. (If you still have the data)

You can also view the events in the next tab and just see each violation and who did it.

No, there is no report for a single category if thats what you are looking for.

[amsi]

Thanks for help.