Snapshot report from 2 gb Cisco ASA Firewall logs only showing 8 Apps?

[Lassekatten]

Hi all,

I have uploaded 2GB worth of FW logs from a Cisco ASA perimiter FW to create a MCAS snapshot report.

The network architect confirmed the log format is identical to the example one in the MCAS portal - it contains all Teardown TCP records.

Unfortunately the report only finds 8 cloud apps in total, which I seriously doubt is correct. 

Do any of you guys have a clue on what could be causing only 8 apps to show on the snapshot report?

Br.

Lars

[#2]

@Lassekatten Hi, there is a size limit for each log upload (1GB), that could be the reason. Also, do the logs contain any entries outside of the 90 day period?

Link to snapshot doc: https://docs.microsoft.com/en-us/cloud-app-security/create-snapshot-cloud-discovery-reports

[#3]

@Caroline_LeeThanks a lot for the reply!

I have cut the log file into 500 mb files and the 2 GB is only from a 24 hour period approximately 2 weeks ago. So unfortunately I do not think that is the issue.

Br.

Lars

[#4]

@Lassekatten Hi Lars, since you've checked the log format, size and time period there's no reason I can think of as to why you're only seeing 8 apps. I'd recommend opening a support ticket for this issue.