FortiAnalyzer 7.4.3 User Detailed Browsing Log report not returning all results for a user

Hello Chris,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

Hey cjackson,

my first guess would be that the underlying database queries for the detailed browsing log vs the webfilter log differ - there might be additional filters in the detailed browsing report (like only including logs with a destination hostname, or a specific webfilter action).

Are you using the inbuilt charts/reports, or did you modify them?

Are you comfortable with SQL? If yes, you can check details as follows:

-> go into the Detailed Browsing Report, into Layout

-> select 'edit' on the chart, and note the name

-> go to Chart Library, edit the chart, and note the dataset name

-> go to Datasets, find the dataset, and view it

-> check the 'where $filter and [...]' clause; $filter is a placeholder for the chart/report filters, such as timerange, devices, VDOM, and anything following after would be inbuilt filters. Those would restrict what logs count for the dataset (and thus chart/report) and could explain the difference.

Cheers,

Debbie