Which set of options is available for detailed logs when building a custom report on a Palo Alto Networks NGFW?

The correct answer is B. Traffic, threat, data filtering, User-ID. When creating custom reports on a Palo Alto Networks NGFW, the available detailed log databases are Traffic, Threat, Data Filtering, and User-ID logs. These represent the core logging categories that capture session-level detail needed for granular custom reporting. Option A…

Monitoring and Reporting

Question

Options

ATraffic, User-ID, URL
BTraffic, threat, data filtering, User-ID
CGlobalProtect, traffic, application statistics
DThreat, GlobalProtect, application statistics, WildFire submissions

How the community answered

(57 responses)

A
4% (2)
B
89% (51)
C
2% (1)
D
5% (3)

Explanation

When creating custom reports on a Palo Alto Networks NGFW, the available detailed log databases are Traffic, Threat, Data Filtering, and User-ID logs. These represent the core logging categories that capture session-level detail needed for granular custom reporting. Option A omits Threat and Data Filtering logs, which are critical for security reporting. Option C includes GlobalProtect and Application Statistics, which are summary/aggregated report types rather than detailed log databases for custom reports. Option D combines Threat and WildFire submissions (valid) with GlobalProtect and Application Statistics, which again are not part of the detailed log set available for custom report building; they belong to predefined report categories.

Topics

#Logging#Reporting#Log Types#Custom Reports

Community Discussion

No community discussion yet for this question.

Full NGFW-ENGINEER Practice