Merge pull request #5303 from DeCohen/WI499501-traffic-log-config-note-update

note: Configure the appliance to forward only traffic logs.

Author: aditisrivastava07

defender-for-cloud-apps/create-snapshot-cloud-discovery-reports.md

@@ -1,7 +1,7 @@
 ---
 title: Create snapshot cloud discovery reports
 description: This article provides information about how to upload logs manually to create a snapshot report of your cloud discovery apps.
-ms.date: 01/29/2023
+ms.date: 10/20/2025
 ms.topic: how-to
 ms.reviewer: Mravela
 ---
@@ -61,6 +61,7 @@ To create a snapshot report:
 
 Cloud discovery uses the data in your traffic logs. The more detailed your log, the better visibility you get. Cloud discovery requires web-traffic data with the following attributes:
 
+
 - Date of the transaction
 - Source IP
 - Source user - highly recommended
@@ -77,9 +78,10 @@ Therefore, these attributes won't be shown in cloud discovery data for these log
 To successfully generate a cloud discovery report, your traffic logs must meet the following conditions:
 
 1. [Data source is supported](set-up-cloud-discovery.md#supported-firewalls-and-proxies).
-2. Log format matches the expected standard format (format checked upon upload by the Log tool).
-3. Events aren't more than 90 days old.
-4. The log file is valid and includes outbound traffic information.
+1. Log format matches the expected standard format (format checked upon upload by the Log tool).
+1. Events aren't more than 90 days old.
+1. The log file is valid and includes outbound traffic information.
+1. Configure the appliance to forward only traffic logs. Including unrelated logs in the configuration can inflate the ingested traffic volume.
 
 ## Next steps