Hello
I have a MARS running w/ a few custom reports. I noticed that the custom reports/querys had difference in the data information from the pre-configured reports.
1- Difference - The columns:
Pre-configured
Rank -Total Sessions - Average / Minute - Raw Source IP - Hosts
Custom
Rank - Count (# of Sessions) - Raw Source IP – Hosts
2- Difference - The data:
I have a huge difference on the data, for instance, I’ve attached the 2 prints of the pre-configured report and a custom query. They both have the same time frame.
Query: Activity: All - Top Sources
Pre-configured: Activity: All - Top Sources
The data reported on the pre-configured report is 10x more than the custom query All the variances are the same, time, destination, source, service etc. Is there a diference on the data collected on the query and custom report to the pre-configured report ?
If i query for the preconfigured "Activity: All - Top Sources", or if i manualy configure it, or if i manualy create a report, the data will be diferente from the pre-configured report.
Does anyone know why ?
Thank you