Skip to main content
Marek
Marek
New Member
June 13, 2017
Solved

Gathering info about users connected per hour/day/week

  • June 13, 2017
  • 1 reply
  • 11321 views

Hi

I was wandering how can i get raport about end-systems like smartphones/hosts etc. that were connected to my device last day/ last week/last mont

In my Analyzer i can only generate report about "TOP" users TOP sites etc. but i need to know how many end-systems were use my FG to connect to the internet.

I have about 500 fortigates to report about "how many end systems were using my FG to connect to the internet", my devices are like FG80C and FW80CM

 

Can anybody help me?

Regards Marek

Best answer by hzhao_FTNT

You got this error message from dataset test console? How about report running?

Because dataset test will directly query all available tables, if you have high log rate, it could cause DB server out of memory. This dataset is good, you can just create a report based on it.

1 reply

Marek
MarekAuthor
New Member
June 14, 2017

Anybody?

hzhao_FTNT
Staff
hzhao_FTNT
Staff
June 14, 2017

Hi there,

 

Please create a dataset as below, then create a drill-down table chart base on it, see attached screenshot for chart setting..

Log type: traffic

select hourstamp, devid, count(distinct f_user) as user_count from ###(select devid, $HOUR_OF_DAY as hourstamp, coalesce(nullifna(`user`), nullifna(`unauthuser`), ipstr(`srcip`)) as f_user from $log where $filter and logid_to_int(logid) not in (4, 7, 14)  group by devid, hourstamp, f_user)### t group by hourstamp, devid order by hourstamp desc

 

regards,

hz

hzhao_FTNT
Staff
hzhao_FTNT
Staff
June 14, 2017

BTW, you can change $HOUR_OF_DAY to $DAY_OF_MONTH for per day report. We don't have built-in function for per week, you can check standard postgres data/time function for it.

Terms & ConditionsAccessibility statement