Default Top 10 Application Categories report is blank (when you select individual sensors)

Technical Articles ID: KB93481
Last Modified: 2024-01-17 14:12:59 Etc/GMT

Environment

Trellix Intrusion Prevention System

Problem

You create a report based on Application Categories in the following way:

Click Analysis, Event Reporting, Next Generation Reports, New.
Click Application Data, Hourly, and choose the Individual Sensor or Domain.

When you click Run, you see that an output of No data matched.

But, when you create a Default Report (Default, Top 10 Application Categories by Bandwidth Usage (Bytes)), the report is generated with all data inside it.

System Change

The application identification feature is disabled on the configured Sensor.

Solution

To get the report data per Sensor, you must enable the Application identification feature on the Sensor.

Perform the following steps for each Sensor you require application data for:

Click Devices, Application identification, Enable.
Select the interfaces that you want to enable Application identification on.
Save the changes.
Deploy the configuration to the Sensor.
Wait for a few minutes as data is collected and then check the report.

NOTE: Identifying applications is a resource-intensive process. The Sensor-performing application identification on all traffic reduces throughput by about 10%. The amount of actual throughput drop varies based on the type of traffic.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Default Top 10 Application Categories report is blank (when you select individual sensors)

Environment

Problem

System Change

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Default Top 10 Application Categories report is blank (when you select individual sensors)

Environment

Problem

System Change

Solution

Affected Products

Languages:

Choose your region

Title

Title