Currentrly using Sawmill for Iromport reporting and when I run a report against a specific website using a wildcard I am only getting seven URLs returned a being logged. I am expecting a much larger number of URL from this one specific web site.
Do I need to change the filter? I currently have it set for www.<websitename>.com. I would expect I would get back a ton of URLs that users have hit.
Thx
Hi ,
I would recommend taking a look at this external KB for sawmill:
https://ironport.custhelp.com/app/answers/detail/a_id/1697
Let me know if this helps or not.
Sincerely,
Erik Kaiser
WSA CSE
WSA Cisco Forums Moderator