Add or remove data columns to connection or activity data tables

On the DNS Activity, Proxy Activity, and the Network Traffic tabs of the Activity page, you can add or remove data that appears in the connections or activity data tables. The modifications you make to an individual table apply to all connection and activity tables you view.

You must be an ETP administrator or a user with a specific permission to view the DNS Activity or Proxy Activity reports. For more information, see Enterprise Threat Protector roles.

How to

  1. In the Enterprise Center navigation menu, select Threat Analytics > Activity.
  2. Do one of these steps:
    • For data on DNS traffic directed to ETP, select DNS Activity.
    • For data on traffic directed to ETP Proxy, select Proxy Activity.
    • For data on traffic directed to ETP, select Network Traffic.
  3. Filter events as needed. For more information see Filter data based on date and time. Depending on the data you are filtering, do one of these steps:
  4. If you haven’t done so already, select a dimension or criteria.
  5. To add a data column to the connections or activity data table:
    1. In the grouped connections area of the page, click the table icon. A list of additional attributes appear.
    2. Select the data type that you want to add to the table. A column for this data appears.
  6. To remove a data column from the connections or activity data table:
    1. In the grouped connections or activity area of the page, click the table icon. A list of data types appear.
    2. Deselect any data type that you want to remove from the table. After a data type is deselected, the column is removed from the table.