Looks this functionality doesn't exactly exist right now.
Here are some options:
SYSLOG Server
- Poing the vShield appliance at a SYSLOG server
- Allows you to look back in time
- Requires you to setup a syslog server if you don't have one
SSH to vShield appliance
- Here you can watch network traffic in action
- Using commands like:
- show flowtable flowspec srcip=192.168.175.78
- Only shows you live traffic, does not show you history
- show log follow
- Shows live traffic as it happens
- show log
- Lets you see what has happened in the past
- show flowtable flowspec srcip=192.168.175.78
Would like to know of any other methods that can be used.