Troubleshoot Default Cloud Services Queries
Dashboards or reports fail to display data for the following Skyhigh-recommended Cloud Service queries when the log source type is not configured as Skyhigh Web Gateway Cloud Service:
- Top Blocked Web Categories – Cloud Service
- Top Blocked Web Malware – Cloud Service
- Top Blocked Websites – Cloud Service
Workaround
Perform the following steps to resolve this issue:
-
Go to Queries and Report > Trellix Group.
-
In the Queries section, search for Cloud in the Quick Find field.
You will see three cloud-based queries. -
Click Duplicate to duplicate the default query.
The duplicated query appears in the Private group. -
Select the duplicated query and click Edit under the Actions section.
-
In the Filters section, remove the Log Source type filter.
-
Add Log Source name, and in the value field, select the cloud log source.
-
Save the modified query.
You can now use this updated query in your dashboard or reports to successfully fetch the required data.