Skip to main content
  • EN

Discussions

Get answers to your questions about app usage, data movement, and user behaviors. With Advanced Analytics, you can identify trends, zero in on areas of concern and use the data to take action.

  • 75 Topics
  • 73 Replies
75 Topics
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
posted in Discussions
Swap data using table calculations

Recently, one of our customers who is leveraging risk insights for log ingestion ran into a problem. For certain dates of the month (April 14 & 15), the ingestion swapped "Bytes Uploaded" and "Bytes Downloaded." How can they leverage Advanced Analytics to swap the data back so that their monthly reporting would be accurate? Here is one solution with Table Calculations.  The first step is to create a Custom Dimension with command: concat(${page_event.event_timestamp_date},"")  This converts the format of all “Event Dates” from “Timestamp” to “String,” which helps avoid potential errors in our Table Calculations. We name the dimension Event Date - String and then save it. The second step is to create Table Calculations which swap the data for particular dates (April 14 & 15 in this case). Let’s start with the Table Calculation swapping “Bytes Uploaded” to “Bytes Downloaded.” We create a Table Calculation with command: if(  ${event_date_string}="2024-04-14"  OR  ${event_date_strin

640
Aaron_Zhang
Netskope Employee
8 months ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
posted in Discussions
March 2024 Office Hours Recap

Hello Folks,  Below you can find a recap of questions asked at the March office hours session and those sent in that we were not able to cover during the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar! Q: How to better analyze and manage GPT traffic using Advanced Analytics?A: We recommend starting with the AI Usage Dashboard in Netskope Library, which helps you understand how AI apps & sites (e.g. ChatGPT) are being used in your organization. You can also find an updated version of the AI Usage Dashboard in Netskope Community. This version provides additional visibility into App Instances, which helps you identify if your Corporate Instances are exposed with AI usage. Q: How can we combine reports to see data being uploaded to risky applications and to understand their CCL?A: The Application Risk Management Dashboard is a great starting point for this use case. The dashboard helps you

1600
Aaron_Zhang
Netskope Employee
8 months ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
posted in Discussions
February Office Hours Recap

 Hello Folks,  Below you can find a recap of questions asked at the February office hours session and those sent in that we were not able to cover during the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar! Q: We noticed that the community page looks different now. What happened?A: We recently launched a new version of Netskope Community, and that is why you may have observed many changes in our community page. The URL remains the same, so you can still visit our community through https://community.netskope.com/. Advanced Analytics section is still located in the new community landing page, where you can access all the features like dashboard gallery, discussion board, and training resources.  We are still updating the new community page, so you may see additional changes in the upcoming weeks or months. In the meantime, please feel free to share any feedback and let us know if you have any

2090
Aaron_Zhang
Netskope Employee
9 months ago
C
cswordNew Member III
posted in Discussions
Reporting on device "Last Event: User Disabled" events

I want to generate a weekly report using Advanced Analytics that shows a list of users and timestamps when a user disables the Netskope Client. I see we can filter this on the Security Cloud Platform > Netskope Client.> Devices page by adding a filter: "Last Event: User Disabled" so I looked for this in the Advanced Analytics Explore page but couldn't locate anything. Is this currently possible with the Data Collection options we currently have? Or does a new data collection option feature need to be added for device events to accomplish this?  While we have the user disable option turned off for most staff, this would be a helpful way for us to track down users who are turning the client off for various issues and are not vocal about the problems they are having. This would be super helpful on our road to complete org-wide client tamper-proofing.  Thanks!

3472
qyost
10 months ago
P
Netskope Partner
Paradox07Netskope Partner
asked in Discussions
I am facing issues while provisioning user groups to netskope console from OneLogin

Hi Everyone,While provisioning users from OneLogin to netskope console, I am facing issues when I try to fetch groups. I have successfully provisioned users by following the given document: https://docs.netskope.com/en/netskope-help/integrations-439794/provisioning-and-authentication/user-and-user-group-provisioning-with-onelogin But when it comes to provision groups I am unable to find a way to achieve the same.If there are any ways or documentation kindly let me know.

561
S
Netskope Employee
10 months ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
posted in Discussions
January 2024 Office Hours Recap

Hello Folks,    Below you can find a recap of questions asked at the January office hours session and those sent in that we were not able to cover during the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: I’d like to know which recommended training we should take in a structured manner to get started with Advanced Analytics. A: We highly recommend starting with the NAA Training Resources post in our community. The post points you to a list of resources which can help you quickly get started with Advanced Analytics. If you are looking for some recommended dashboards to start with, the NAA Top Dashboards post will be a good choice.   Q: I want to make sure we are using Netskope products effectively. Can I leverage Advanced Analytics on this? A: Yes. The CASB & NG-SWG Operationalization Dashboard are two good starting points. With focus on CASB & NG-SWG, these

1100
Aaron_Zhang
Netskope Employee
10 months ago
kvarshney
kvarshneyExplorer III
posted in Discussions
Office Hours: Advanced Analytics

Join Aaron Zhang, Analytics Specialist at Netskope for a conversation on how to get actionable insights with data and analytics about your environment, security posture and risk exposure. Bring your questions on Advanced Analytics and get step-by-step answers using a live Netskope environment.   This session is for Netskope Advanced Analytics customers, and aimed at engineers who have hands-on experience with Netskope. We welcome interaction so that you can learn from each other and share your personal experiences.   Agenda: 1.) Introductions 2.) Open Floor Q&A 3.) "Select a Use Case" 4.) Resources and where to get help

840
kvarshney
11 months ago
kvarshney
kvarshneyExplorer III
posted in Discussions
Office Hours: Advanced Analytics

Join Aaron Zhang, Analytics Specialist at Netskope for a conversation on how to get actionable insights with data and analytics about your environment, security posture and risk exposure. Bring your questions on Advanced Analytics and get step-by-step answers using a live Netskope environment.   This session is for Netskope Advanced Analytics customers, and aimed at engineers who have hands-on experience with Netskope. We welcome interaction so that you can learn from each other and share your personal experiences.   Agenda: 1.) Introductions 2.) Open Floor Q&A 3.) "Select a Use Case" 4.) Resources and where to get help

720
kvarshney
11 months ago
kvarshney
kvarshneyExplorer III
posted in Discussions
Office Hours: Advanced Analytics

Join Aaron Zhang, Analytics Specialist at Netskope for a conversation on how to get actionable insights with data and analytics about your environment, security posture and risk exposure. Bring your questions on Advanced Analytics and get step-by-step answers using a live Netskope environment.   This session is for Netskope Advanced Analytics customers, and aimed at engineers who have hands-on experience with Netskope. We welcome interaction so that you can learn from each other and share your personal experiences.   Agenda: 1.) Introductions 2.) Open Floor Q&A 3.) "Select a Use Case" 4.) Resources and where to get help

700
kvarshney
11 months ago
kvarshney
kvarshneyExplorer III
posted in Discussions
Office Hours: Advanced Analytics

Join Aaron Zhang, Analytics Specialist at Netskope for a conversation on how to get actionable insights with data and analytics about your environment, security posture and risk exposure. Bring your questions on Advanced Analytics and get step-by-step answers using a live Netskope environment.   This session is for Netskope Advanced Analytics customers, and aimed at engineers who have hands-on experience with Netskope. We welcome interaction so that you can learn from each other and share your personal experiences.   Agenda: 1.) Introductions 2.) Open Floor Q&A 3.) "Select a Use Case" 4.) Resources and where to get help

680
kvarshney
11 months ago
kvarshney
kvarshneyExplorer III
posted in Discussions
Office Hours: Advanced Analytics

Join Aaron Zhang, Analytics Specialist at Netskope for a conversation on how to get actionable insights with data and analytics about your environment, security posture and risk exposure. Bring your questions on Advanced Analytics and get step-by-step answers using a live Netskope environment.   This session is for Netskope Advanced Analytics customers, and aimed at engineers who have hands-on experience with Netskope. We welcome interaction so that you can learn from each other and share your personal experiences.   Agenda: 1.) Introductions 2.) Open Floor Q&A 3.) "Select a Use Case" 4.) Resources and where to get help

630
kvarshney
11 months ago
kvarshney
kvarshneyExplorer III
posted in Discussions
Office Hours: Advanced Analytics

Join Aaron Zhang, Analytics Specialist at Netskope for a conversation on how to get actionable insights with data and analytics about your environment, security posture and risk exposure. Bring your questions on Advanced Analytics and get step-by-step answers using a live Netskope environment.   This session is for Netskope Advanced Analytics customers, and aimed at engineers who have hands-on experience with Netskope. We welcome interaction so that you can learn from each other and share your personal experiences.   Agenda: 1.) Introductions 2.) Open Floor Q&A 3.) "Select a Use Case" 4.) Resources and where to get help

610
kvarshney
11 months ago
kvarshney
kvarshneyExplorer III
posted in Discussions
Office Hours: Advanced Analytics

Join Aaron Zhang, Analytics Specialist at Netskope for a conversation on how to get actionable insights with data and analytics about your environment, security posture and risk exposure. Bring your questions on Advanced Analytics and get step-by-step answers using a live Netskope environment.   This session is for Netskope Advanced Analytics customers, and aimed at engineers who have hands-on experience with Netskope. We welcome interaction so that you can learn from each other and share your personal experiences.   Agenda: 1.) Introductions 2.) Open Floor Q&A 3.) "Select a Use Case" 4.) Resources and where to get help

570
kvarshney
11 months ago
kvarshney
kvarshneyExplorer III
posted in Discussions
Office Hours: Advanced Analytics

Join Aaron Zhang, Analytics Specialist at Netskope for a conversation on how to get actionable insights with data and analytics about your environment, security posture and risk exposure. Bring your questions on Advanced Analytics and get step-by-step answers using a live Netskope environment.   This session is for Netskope Advanced Analytics customers, and aimed at engineers who have hands-on experience with Netskope. We welcome interaction so that you can learn from each other and share your personal experiences.   Agenda: 1.) Introductions 2.) Open Floor Q&A 3.) "Select a Use Case" 4.) Resources and where to get help

530
kvarshney
11 months ago
kvarshney
kvarshneyExplorer III
posted in Discussions
Office Hours: Advanced Analytics

Join Aaron Zhang, Analytics Specialist at Netskope for a conversation on how to get actionable insights with data and analytics about your environment, security posture and risk exposure. Bring your questions on Advanced Analytics and get step-by-step answers using a live Netskope environment.   This session is for Netskope Advanced Analytics customers, and aimed at engineers who have hands-on experience with Netskope. We welcome interaction so that you can learn from each other and share your personal experiences.   Agenda: 1.) Introductions 2.) Open Floor Q&A 3.) "Select a Use Case" 4.) Resources and where to get help

560
kvarshney
11 months ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
posted in Discussions
December Office Hours Recap

Hello Folks,    Below you can find a recap of questions asked at the December office hours session and those sent in that we were not able to cover during the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Happy New Year!   Q: I’m confused about custom dimensions in Advanced Analytics. Are there any resources I can review to better understand this feature? A: Yes. You can find a tutorial on custom fields (including custom dimensions) in this training video. This article from Netskope Knowledge Portal can also help.   Q: I’m looking for a tutorial on Netskope Data Loss Prevention (DLP). A: This article provides a list of resources on Netskope DLP, which can be a great starting point. If you are interested in best practices and a deep dive into this topic, please watch this webinar.   Q: Can I view Chrome versions detected in my organization and how many peopl

1340
Aaron_Zhang
Netskope Employee
11 months ago
M
MichaelKoherNew Member III
asked in Discussions
API OneDrive Reports

I am attempting to build an AA report from my OneDrive API connector, but I am finding it is working off alerts vs the API data. What I am trying to build is a report showing employees have used their OneDrive to share with external users the name of the file/folder, type, and size. I can get that data if it falls in the 90-day data window we have with AA, but I can't pull from the raw API over the life of the file/folder. I would just use the API Export, but it leaves off the shared with many times, so I was hoping AA would solve that.  Is that because AA is limited to only alerts within the subscription of data like 30/90 days?  Thank you  

590
jforrest
Netskope Employee
1 year ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
posted in Discussions
November Office Hours Recap

  Hello Folks,   Below you can find a recap of questions asked at the Nov office hours session and those sent in that we were not able to cover during the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: Where can I get some resources to quickly get started with Advanced Analytics? A: We highly recommend starting with the NAA Training Resources post in our community. The post points you to a list of resources which can help you quickly get started with Advanced Analytics. If you are looking for some recommended dashboards to start with, the NAA Top Dashboards post will be a good choice.   Q: We are looking for insights for Board & Executives reporting, including AI. Can I leverage Advanced Analytics on this? A: Sure. For AI-related topics, we recommend starting with the AI Usage Dashboard in Netskope Library, which helps you understand how AI apps & sites are

930
Aaron_Zhang
Netskope Employee
1 year ago
qyost
qyostExplorer III
asked in Discussions
Couple custom field creation questions

I have two values I would like to display in a table widget, but I can't seem to find the right way to craft the custom field.  For both, I'm trying to extract a single value across mutliple individual alerts.1) I can easily get the number of users matching the criteria for the record, but I would prefer to display a list of the users. How can this be done without presenting a row for each user? I would much prefer to have them summarized into a single cell.2) The second summary field I would like to create is the "most recent" time across the individual records.Table I'm working withAny recommendations would be appreciated.

380
D
Netskope Employee
1 year ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
posted in Discussions
October Office Hours Recap

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last month and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: I’m new to Advanced Analytics. How and where can I start my journey? A: Netskope Advanced Analytics - Getting Started and “Getting Started” Webinar will help you get started quickly. More details can be found from our YouTube Channel. We highly recommend starting with existing dashboards, either in Netskope Library or Community. Tags can help you find dashboards you are interested in. You can explore any dashboards based on your needs, and customize them in your environment. You can also find tons of resources (e.g., hot topic discussion, dashboard intro, and upcoming AA events, etc.) here on the Netskope Community.   Q: Regarding API protection, I’m lookin

950
Aaron_Zhang
Netskope Employee
1 year ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
posted in Discussions
September Office Hours Recap

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last month and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: When I create a dashboard in Advanced Analytics, is it visible to everyone by default or just me? A: If you created the dashboard in your personal folder, it is visible to you only. If the dashboard is in the group folder, it will be visible to everyone in your environment.   Q: I want to understand if my organization is using Netskope’s CASB product to its full potential. Can Advanced Analytics help me with this? A: Yes. The CASB Operationalization Dashboard can help! It helps you maximize the ROI of your Netskope investment by highlighting ways to ensure you are using Netskope to its full potential. The specific focus of this dashboard is operationalizati

680
Aaron_Zhang
Netskope Employee
1 year ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
posted in Discussions
August Office Hours Recap

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last month and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: I’m looking for visibility into YouTube usage in my organization. Can Advanced Analytics help me with this? A: Sure! Please check the YouTube Activity Dashboard from our community. This dashboard will give you an overview and approximation of the time users spend on YouTube.    Q: My organization is interested in learning when users are downloading from corporate applications to personal machines without the client installed. Is this possible? How to make sure it’s NOT from a managed device (possibly looking at non-corporate IP ranges)? A: In general, Netskope recommends that conditional access be used within the application management controls to lock

1420
Aaron_Zhang
Netskope Employee
1 year ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
published in Discussions
Change Time Format to 00:00:00

  Are you bored of reporting time with "hours," "minutes," and "seconds" in Advanced Analytics? Are you looking for a cool and efficient way to report time like an F1 driver? This post can help!   Let's start with an example. Netskope wants to report the connection duration of each application. A traditional way is to use the "Connection Duration" field, which will return connection duration in seconds. For instance, if a session is connected at 9:00 AM and disconnected at 10:30 AM, the result would be "5,400 seconds."    Now, Netskope wants to report the connection duration in a different format "00:00:00." To make this happen, all we need to do is just applying the custom field below: This field will convert the original result "5,400 seconds" to "1:30:00 (1 hour, 30 minutes, 0 seconds)," which provides a more visualized way to report time. The dashboard has been attached below. Feel free to download and import it into your own environment for more details. &nbs

1510
Mario Garcia
Netskope Employee
1 year ago
Aaron_Zhang
Netskope Employee
Aaron_ZhangNetskope Employee
posted in Discussions
July Office Hours Recap

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last week and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: How do I leverage Advanced Analytics for threat hunting activities?  A: Check out some blogs recently posted by Netskope’s internal security team including:  The Threat Hunting Process Threat Hunting: Suspected Shell Traffic in Advanced Analytics Investigating .zip and .mov top-level domains   Q: I’m new to Advanced Analytics. How and where can I start my journey? A: Netskope Advanced Analytics - Getting Started will help you get started in about 5 minutes. For a more indepth getting started guide, check out our recent webinar Getting Started with Advanced Analytics.   Q: How can I leverage Advanced Analytics to properly measure policy e

1060
Aaron_Zhang
Netskope Employee
1 year ago
A
Netskope Employee
AFunkhouserNetskope Employee
posted in Discussions
Threat Hunting: Suspected Shell Traffic in Advanced Analytics

Web shells are commonly used by threat actors as part of the command and control phase of a cyberattack. These shells can be custom code and used by common C2 frameworks such as Cobalt Strike or be generated as a default payload in exploitation frameworks such as Metasploit. With this comes a challenge to security professionals on how to detect, mitigate, and hunt these shells that may be generated by an adversary during an attack. Netskope’s Advanced Analytics can be used in combination with Netskopes Cloud Firewall to create a dashboard that provides insight into where potential shell traffic is occurring within an organization's environment.    Uploaded with this community post is a Netskope Advance Analytics Dashboard that provides broad insight into where these potential shells may be occurring within an organization's environment.    The first Widget in the dashboard is the Ping dashboard. This shows ping traffic within the organization's environment. Dependin

370
A
Netskope Employee
1 year ago

Badge winners

Show all badges
Terms & ConditionsCookie settings