topic Re: Can I configure complex views using smart reporter? in General Topics

Can I configure complex views using smart reporter?

Blason_R — Mon, 29 Sep 2025 17:26:24 GMT

Hello,

I am really curious whether complex operations can be visualized through views in Smart Console? I require a plot of source IP addresses that have communicated with destination IP addresses exceeding 20 GB within a single day. These should be grouped by destination address, excluding port 443 and UDP 53, and the destination addresses must not be RFC1918.

Re: Can I configure complex views using smart reporter?

PhoneBoy — Tue, 30 Sep 2025 00:24:22 GMT

From what I remember of SmartEvent, I don't think you can create a report like that.

Re: Can I configure complex views using smart reporter?

the_rock — Fri, 03 Oct 2025 02:41:15 GMT

Customer asked me that exact thing last year and TAC told me it was not possible. They did mention it could be doable possibly by exporting logs to external tool, but not via smart console.

Andy

Re: Can I configure complex views using smart reporter?

Blason_R — Fri, 03 Oct 2025 02:55:16 GMT

Yeah that is right but then I built elaticsearch and started ingesting logs there to build a complex queries.

Re: Can I configure complex views using smart reporter?

the_rock — Fri, 03 Oct 2025 02:57:46 GMT

Yeah, you can do that. I had one of my colleagues show me, he is SIEM genius...lots of possibilites.

Andy

Re: Can I configure complex views using smart reporter?

the_rock — Sat, 04 Oct 2025 17:47:43 GMT

Hey mate,

I had quick chat about this with a customer that has diamond support and they asked their dedicated engineer about it and were told this is something thats planned soon, hopefully in R82.10 or next major version. Apparently there were other clients asking about it.

Best,

Andy