Skip to main content
Oblivionking
New Member
November 8, 2016
Solved

Custom report

  • November 8, 2016
  • 5 replies
  • 8515 views

Hello! Could you please help me with creating custom report templates.

I want to create report with specific columns (example is in attached file).

 

And one more question - Can I add to report some of Active Directory atributes?

tel  +7 7222 600006
fax  +7 7222 604740

    Best answer by hzhao_FTNT

    In most cases, we can not see HOSTNAME of the user PC in log. Maybe you can select srcip in dataset, then enable "Resolve Hostname" in chart setting. If the srcip can be resolved by your DNS, then you will see hostname in report output.

    5 replies

    hzhao_FTNT
    Staff
    Staff
    November 18, 2016

    Please try:

    select to_char(from_dtime(dtime), 'dd.mm.yyyy') as daystamp, coalesce(nullifna(`user`), nullifna(`unauthuser`), 'N/A') as user_src, coalesce(`srcname`, ipstr(`srcip`)) as dev_src, catdesc, hostname as website, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log where $filter and hostname is not null and logid_to_int(logid) not in (4, 7, 14) and (countweb>0 or ((logver is null or logver<52) and (hostname is not null or utmevent in ('webfilter', 'banned-word', 'web-content', 'command-block', 'script-filter')))) group by daystamp, user_src, dev_src, catdesc, website order by daystamp desc, bandwidth desc

     

    Not sure which attribute of AD do you need. We do support ldap filter for report, so you can add group filter based on AD.

     

    regards,

    hz

     

    Oblivionking
    New Member
    November 25, 2016

    Hello. It's very usefull and looks great!

    But one more question - Could we add to report the HOSTNAME of the user PC?

    hzhao_FTNT
    Staff
    Staff
    November 25, 2016

    In most cases, we can not see HOSTNAME of the user PC in log. Maybe you can select srcip in dataset, then enable "Resolve Hostname" in chart setting. If the srcip can be resolved by your DNS, then you will see hostname in report output.

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!