Download a CSV file with connection or activity information

From the DNS Activity, Proxy Activity and Network Traffic reports, you can download a CSV that contains a complete list of connections or activity. Each table shows the latest 500 connections. However, you can download a CSV file to see up to 50,000 of the most recent connections or activity based on the dimension and filters you selected.

You must be an ETP super administrator or a user with a specific permission to view the DNS Activity or Proxy Activity reports. For more information, see Enterprise Threat Protector roles.

How to

  1. In the navigation menu, select Monitoring > Activity.
    Note: If you are trying the new Enterprise Center interface, in the navigation menu, select Threat Analytics > Activity.
  2. Do one of these steps:
    • For data on DNS traffic directed to ETP, click DNS Activity.
    • For data on traffic directed to ETP Proxy, click Proxy Activity.
    • For data on traffic directed to ETP, click Network Traffic.
  3. Filter data as needed. For more information see Filter data based on date and time. Depending on the data you are filtering, do one of these steps:
  4. If you haven’t done so already, select a dimension or criteria.
  5. In the grouped connections or activity area, click the arrow icon to show the connections or activity associated with the selected dimension.
  6. Click Download CSV (All Events) to download the connections or activity that are associated with the dimension you selected.